CVE-2025-2589
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 21, 2025
Updated: Apr 1, 2025
CWE ID 787
Summary
CVE-2025-2589 is a critical vulnerability affecting version 1.0.1 of the code-projects Human Resource Management System. The issue lies within the Index function of the file \handler\Account.go, where manipulation of the user_cookie argument can result in unauthorized access. This vulnerability has been disclosed to the public, making exploitation a potential threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.