Permission Control Flaw in eTimeTrackLite by eSSL Security
CVE-2025-60291

9.1CRITICAL

Key Information:

Vendor

eSSL Security

Status
eTimeTrackLite Web
Vendor
CVE Published:
27 October 2025

What is CVE-2025-60291?

A permission control flaw has been identified in eTimeTrackLite Web that allows unauthorized attackers to gain access to sensitive routes within the application. This vulnerability enables potential modifications to critical database connection configurations, potentially compromising the integrity and security of the system. Users of affected versions are strongly encouraged to apply security best practices and update their systems to prevent exploitation of this flaw.

References

https://www.esslsecurity.com/
https://github.com/M00nBack/CVE_Request/blob/main/eSSL%20...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.