CVE-2025-4531 | Seeyon Zhiyuan OA Web Application System 8.1 SP2 Beetl Template EhrSalaryPayrollServiceImpl.class postData payrollId code injection

A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been rated as critical. Affected by this issue is the function postData of the file ROOTWEB-INFclassescomourswwwehrsalaryservicedataEhrSalaryPayrollServiceImpl.class of the component Beetl Template Handler. The manipulation of the argument payrollId leads to code injection.

This vulnerability is handled as CVE-2025-4531. The attack may be launched remotely. Furthermore, there is an exploit available.