CVE-2026-90501

A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT. This issue affects the function HrInfoController.updateHr of the file HrMapper.xml. Such manipulation of the argument Password leads to improper privilege management. The attack may be performed from remote. The exploit has bee...

CVE-2026-90501

CVE-2026-90501 affects the lenve vhr application (version 1.0-SNAPSHOT ). The vulnerability resides in the HrInfoController.updateHr function within HrMapper.xml , where manipulation of the Password argument leads to improper privilege management (mass assignment privilege escalation, per the ass...

PT-2026-90800

Name of the Vulnerable Software and Affected Versions lenve vhr version 1.0-SNAPSHOT Description An improper authorization issue exists in the Password Update Handler component. A remote attacker can manipulate the hrid argument within the HrInfoController.updatePass function of the '/hr/pass'...