Improper Authorization Vulnerability in Patika Global Technologies HumanSuite
CVE-2025-8057

6.5MEDIUM

Key Information:

Vendor

Patika Global Technologies

Status
Humansuite
Vendor
CVE Published:
16 September 2025

What is CVE-2025-8057?

An improper authorization vulnerability in Patika Global Technologies HumanSuite allows attackers to exploit trust in the client. This flaw stems from an authorization bypass through a user-controlled key and an externally controlled reference to a resource in another sphere, posing significant risks before version 53.21.0.

Affected Version(s)

HumanSuite 0 < 53.21.0

References

https://www.usom.gov.tr/bildirim/tr-25-0257
third-party-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Berkan Er
.
CVE-2025-8057 : Improper Authorization Vulnerability in Patika Global Technologies HumanSuite