CVE-2025-51682
Critical · CVSS 9.8mJobtime — Client-Side Authorization Bypass (CWE-602)
- CVSS
- 9.8
- nvd
- EPSS
- —
- KEV
- No
- Class
- other
- CWE-602
Description
mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they can craft requests based on the client-side code to call these administrative functions directly.
Search profile — drives PoC discovery
Symbols mJobtimeclient-side authorizationadministrative featuresadmin bypassclient-side code modification
Keywords CVE-2025-51682mJobtimemJobtime 15.7.2client-side authorization bypassCWE-602time management softwareadmin privilege escalationinfoguard advisorymJobtime PoC
Versions: 15.7.2
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T06:30:39.000Z