CVE-2024-8585
LEARNING DIGITAL Orca HCM - Arbitrary File Download
Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker with regular privileges to download arbitrary system files.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
LEARNING DIGITAL · Orca HCM¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →