Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-84xp-phcj-753r

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The management page of the Orca HCM digital learning platform does not perform identity verification, which allows remote attackers to execute the management function without logging in, access members’ information, modify and delete the courses in system, thus causing users fail to access the learning content.

The management page of the Orca HCM digital learning platform does not perform identity verification, which allows remote attackers to execute the management function without logging in, access members’ information, modify and delete the courses in system, thus causing users fail to access the learning content.

EPSS

Процентиль: 71%
0.00692
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-285
CWE-287

Связанные уязвимости

CVSS3: 7.3
nvd
больше 4 лет назад

The management page of the Orca HCM digital learning platform does not perform identity verification, which allows remote attackers to execute the management function without logging in, access members’ information, modify and delete the courses in system, thus causing users fail to access the learning content.

EPSS

Процентиль: 71%
0.00692
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-285
CWE-287