一、 漏洞 CVE-2025-1815 基础信息
漏洞标题
pbrong hrms resource.go HrmsDB 认证不足漏洞
来源：AIGC 神龙大模型
漏洞描述信息
在pbrong hrms 1.0.1及之前版本中发现了一个被分类为关键的漏洞。该漏洞影响文件\resource\resource.go中的HrmsDB功能。对参数user_cookie的操纵会导致授权不当。可以远程发起攻击。该漏洞的利用方法已经公开，可能会被利用。
来源：AIGC 神龙大模型
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
来源：AIGC 神龙大模型
漏洞类别
授权机制不正确
来源：AIGC 神龙大模型
漏洞标题
pbrong hrms resource.go HrmsDB improper authorization
来源：美国国家漏洞数据库 NVD
漏洞描述信息
A vulnerability, which was classified as critical, was found in pbrong hrms up to 1.0.1. This affects the function HrmsDB of the file \resource\resource.go. The manipulation of the argument user_cookie leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
来源：美国国家漏洞数据库 NVD
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
来源：美国国家漏洞数据库 NVD
漏洞类别
授权机制不恰当
来源：美国国家漏洞数据库 NVD
二、漏洞 CVE-2025-1815 的公开POC
# POC 描述 源链接 神龙链接
三、漏洞 CVE-2025-1815 的情报信息

  • 标题： pbrong/hrms There is an unauthorized access to user information vulnerability in HRms-1.0.1 \resource\resource.go file · Issue #4 · A7cc/cve -- 🔗来源链接

    标签： issue-tracking

    pbrong/hrms There is an unauthorized access to user information vulnerability in HRms-1.0.1 \resource\resource.go file · Issue #4 · A7cc/cve

  • 标题： pbrong/hrms There is an unauthorized access to user information vulnerability in HRms-1.0.1 \resource\resource.go file · Issue #4 · A7cc/cve -- 🔗来源链接

    标签： exploit issue-tracking

    pbrong/hrms There is an unauthorized access to user information vulnerability in HRms-1.0.1 \resource\resource.go file · Issue #4 · A7cc/cve

  • 标题： CVE-2025-1815 pbrong hrms resource.go HrmsDB improper authorization -- 🔗来源链接

    标签： signature permissions-required

    CVE-2025-1815 pbrong hrms resource.go HrmsDB improper authorization

  • 标题： CVE-2025-1815 pbrong hrms resource.go HrmsDB improper authorization -- 🔗来源链接

    标签： vdb-entry technical-description

    CVE-2025-1815 pbrong hrms resource.go HrmsDB improper authorization

  • 标题： Submit #506544: https://github.com/pbrong/hrms hrms 1.0.1 Unauthorized bypass access -- 🔗来源链接

    标签： third-party-advisory

    Submit #506544: https://github.com/pbrong/hrms hrms 1.0.1 Unauthorized bypass access
  • https://nvd.nist.gov/vuln/detail/CVE-2025-1815