CVE-2025-51682
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-01

Last updated on: 2025-12-04

Assigner: MITRE

Description
mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they can craft requests based on the client-side code to call these administrative functions directly.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-01
Last Modified
2025-12-04
Generated
2026-06-16
AI Q&A
2025-12-01
EPSS Evaluated
2026-06-15
NVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
mjobtime mjobtime 15.7.2
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-602 The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

The vulnerability in mJobtime 15.7.2 is due to authorization being handled on the client side. This allows an attacker to modify the client-side code to gain access to administrative features. They can also craft requests based on the client-side code to directly invoke these administrative functions.

Impact Analysis

This vulnerability can allow an attacker to gain unauthorized administrative access to the application, potentially leading to unauthorized changes, data manipulation, or control over administrative functions.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-51682. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart