CVE-2025-29033
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Apr 1, 2025
Updated: Apr 4, 2025
CWE ID 269
Summary
CVE-2025-29033 is a vulnerability affecting BambooHR Build v.25.0210.170831-83b08dd. Maliciously crafted HTTP GET requests containing the "/saml/index.php?r=" parameter can be exploited by remote attackers to escalate privileges and gain unauthorized access to sensitive information. This issue poses a significant risk to organizations using this version of BambooHR Build, and immediate remediation is recommended to mitigate potential threats.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.