Medium · 6.5 CVE-2025-63294 EUVD-2025-37760GHSA-667f-v95m-q2xp

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignati…

Published Nov 4, 2025 · Updated Nov 4, 2025 · Assigned by mitre

Description

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users.

References

https://codecanyon.net/item/hrm-saas-hr-and-payroll-tool/25982934
https://workdo.io/hrm-saas-human-resource-management-software/
https://medium.com/@barrattjack89/cve-2025-63294-insecure-permissions-in-workdo-hrm-saas-hr-and-payroll-8-1-d6bb03c21177