BaseFortify

Publication date: 2025-12-01

Last updated on: 2026-07-05

Assigner: MITRE

Description

mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they can craft requests based on the client-side code to call these administrative functions directly.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-01

Last Modified

2026-07-05

Generated

2026-07-06

AI Q&A

2025-12-01

EPSS Evaluated

2026-07-05

NVD

CVE-2025-51682

Affected Vendors & Products

Vendor	Product	Version / Range
mjobtime	mjobtime	15.7.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-602	The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

Attack-Flow Graph

Executive Summary

The vulnerability in mJobtime 15.7.2 is due to authorization being handled on the client side. This allows an attacker to modify the client-side code to gain access to administrative features. They can also craft requests based on the client-side code to directly invoke these administrative functions.

Impact Analysis

This vulnerability can allow an attacker to gain unauthorized administrative access to the application, potentially leading to unauthorized changes, data manipulation, or control over administrative functions.

Hi! I’m here to help you understand CVE-2025-51682. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70