CVE-2025-13768: Uniong｜WebITR - Authorization Bypass
WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Uniong WebITRto a version that resolves this vulnerability.Fixed in 2_1_0_34
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13768?
CVE-2025-13768 has a high severity rating due to its potential for authenticated remote attackers to log in as any user.
How do I fix CVE-2025-13768?
To fix CVE-2025-13768, you should apply the latest security patches provided by Uniong for the WebITR product.
Who is affected by CVE-2025-13768?
CVE-2025-13768 affects users of the Uniong WebITR software.
What type of vulnerability is CVE-2025-13768?
CVE-2025-13768 is classified as an Authentication Bypass vulnerability.
What is required for an attacker to exploit CVE-2025-13768?
An attacker needs to obtain a user ID to exploit the CVE-2025-13768 vulnerability.