EUVD-2020-23243

Malware in sbrugna...

CVE-2020-35577

In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference IDOR allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier aka CommonDownload identification number...

Endalia Selection Portal Arbitrary File Upload Vulnerability

Endalia Selection Portal is an application from Endalia Spain. It provides a software for attracting and selecting talent. An arbitrary file upload vulnerability exists in Endalia Selection Portal in versions prior to 4.205.0. The vulnerability stems from an insecure object reference that allows...

CVE-2020-35577

In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference IDOR allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier aka CommonDownload identification number...

CVE-2020-35577

In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference IDOR allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier aka CommonDownload identification number...

Design/Logic Flaw

In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference IDOR allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier aka CommonDownload identification number...

CVE-2020-35577

Endalia Selection Portal (before 4.205.0) is affected by an Insecure Direct Object Reference (IDOR) vulnerability. Authenticated users can download any uploaded file by altering the file identifier (CommonDownload ID). This is the root cause described across multiple sources linked to CVE-2020-35...

CVE-2020-35577

In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference IDOR allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier aka CommonDownload identification number...

Endalia Selection Porta 安全漏洞

Endalia Selection Portal is an application from Endalia Spain. It provides a software for attracting and selecting talent. An arbitrary file upload vulnerability exists in Endalia Selection Portal in versions prior to 4.205.0. The vulnerability stems from an insecure object reference that allows...