medium5.3
CVE-2025-15563
Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the WorkTime server.
Impact
Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the WorkTime server. No authorization check is applied here.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nestersoft | Worktime | through 11.8.8 |