Hongjing e-HR Unauthenticated SQL Injection via getSdutyTree
63Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actcvss 8.7epss 0.5%
from disclosure to weapon
Published on NVDAug 13
VulnCheckAug 13
exploitation probability
0.5%top 61% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resources by supplying a path traversal sequence in the request URI to bypass the oauthservlet authentication filter. Attackers can inject UNION-based SQL payloads through the unsanitized codeitemid parameter into the underlying Microsoft SQL Server query to retrieve sensitive database contents including user credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-07-30 (UTC).
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Hongjing Century · e-HRpublic PoCs found — 1
cve_referencecn-sec.com/archives/2926383.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.