4.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.7%
The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the system directory thru Path Traversal with users’ privileges.
www.chtsecurity.com/news/ba7b3ae7-14f3-4970-b3f6-4d97d8c7ea25
www.twcert.org.tw/tw/cp-132-4928-7e87b-1.html