CNNVD-202511-2085 Information

CNNVD ID

CNNVD-202511-2085

CVE-2025-41346

  • CNNVD Published: 2025-11-18

Description (Chinese)

Informática del Este WinPlus是西班牙Informática del Este公司的一个人力资源管理平台。 Informática del Este WinPlus v24.11.27版本存在安全漏洞,该漏洞源于授权控制不当,可能导致攻击者冒充其他用户,影响数据机密性、完整性和可用性。

Description (English)

Informática del Este WinPlus is a human resources management platform of the Spanish company Informática del Este. Version Informática del Este WinPlus v. 24.11.27 contains a security loophole, which stems from inadequate delegated control and may lead to the attacker impersonating other users, affecting data confidentiality, integrity and availability.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Informática del Este

Published

2025-11-18

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/stored-cross-site-scripting-xss-winplus-informatica-del-este

Share on: