CVE-2025-60291

Summary

An issue was discovered in eTimeTrackLite Web thru 12.0 (20250704). There is a permission control flaw that allows unauthorized attackers to access specific routes and modify database connection configurations.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://github.com/M00nBack/CVE_Request/blob/main/eSSL%20Security/eTimeTrackLite.md

References

• https://www.esslsecurity.com/
• https://github.com/M00nBack/CVE_Request/blob/main/eSSL%20Security/eTimeTrackLite.md

• ←Previous
• Next→