CVE-2025-8057
MEDIUMPatika Global Technologies HumanSuite <53.21.0 - Auth Bypass
Title source: llmDescription
Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Patika Global Technologies HumanSuite allows Exploiting Trust in Client.This issue affects HumanSuite: before 53.21.0.
Scores
CVSS v3
6.5
EPSS
0.0004
EPSS Percentile
11.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-639
CWE-610
CWE-285
Status
draft
Timeline
Published
Sep 16, 2025
Tracked Since
Feb 18, 2026