critical9.9
CVE-2025-46157
An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave request form
Impact
An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave request form
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Efrotech | Timetrax | Version 1.0 |