Permission Control Flaw in eTimeTrackLite by eSSL Security

CVE-2025-60291

What is CVE-2025-60291?

A permission control flaw has been identified in eTimeTrackLite Web that allows unauthorized attackers to gain access to sensitive routes within the application. This vulnerability enables potential modifications to critical database connection configurations, potentially compromising the integrity and security of the system. Users of affected versions are strongly encouraged to apply security best practices and update their systems to prevent exploitation of this flaw.

References