Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7q39-r2hm-j8m9

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The Recruitment module in Humanica Humatrix 7 1.0.0.681 and 1.0.0.203 allows remote attackers to access all candidates' information on the website via a modified selApp variable to personalData/resumeDetail.cfm. This includes personal information and other sensitive data.

The Recruitment module in Humanica Humatrix 7 1.0.0.681 and 1.0.0.203 allows remote attackers to access all candidates' information on the website via a modified selApp variable to personalData/resumeDetail.cfm. This includes personal information and other sensitive data.

EPSS

Процентиль: 55%
0.00327
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
CWE-639

Связанные уязвимости

CVSS3: 7.5
nvd
больше 6 лет назад

The Recruitment module in Humanica Humatrix 7 1.0.0.681 and 1.0.0.203 allows remote attackers to access all candidates' information on the website via a modified selApp variable to personalData/resumeDetail.cfm. This includes personal information and other sensitive data.

EPSS

Процентиль: 55%
0.00327
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
CWE-639