26 matches found
CVE-2024-45920
A Stored Cross-Site Scripting XSS vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in "Intrest" feature...
CVE-2024-44860
An information disclosure vulnerability in the /Letter/PrintQr/ endpoint of Solvait v24.4.2 allows attackers to access sensitive data via a crafted request...
CVE-2024-45919
A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflows leading to unauthorized access to sensitive information ...
CVE-2024-45919
A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflows leading to unauthorized access to sensitive information ...
CVE-2024-45919
A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflows leading to unauthorized access to sensitive information ...
Solvait 安全漏洞
Solvait is a human resource management software from Solvait, Inc. A security vulnerability exists in Solvait version 24.4.2, which stems from a vulnerability that can be exploited by an attacker to elevate his or her privileges, resulting in unauthorized access to sensitive information or approv...
CVE-2024-45919: Improper Privilege Management
A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflows leading to unauthorized access to sensitive information ...
PT-2024-31846 · Solvait · Solvait
Name of the Vulnerable Software and Affected Versions: Solvait version 24.4.2 Description: A security flaw has been discovered that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in "/AssignToMe/SetAction" API endpoint, an attacker can...
CVE-2024-45919
A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflows leading to unauthorized access to sensitive information ...
CVE-2024-45919
A security flaw in Solvait version 24.4.2 allows for privilege elevation . An attacker can manipulate the Request ID and Action Type parameters in the /AssignToMe/SetAction API endpoint to bypass approval workflows. This vulnerability can lead to unauthorized access to sensitive information or th...
CVE-2024-45919
A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflows leading to unauthorized access to sensitive information ...
CVE-2024-45920
A Stored Cross-Site Scripting XSS vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in "Intrest" feature...
CVE-2024-45920
A Stored Cross-Site Scripting XSS vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in "Intrest" feature...
CVE-2024-45920
A Stored Cross-Site Scripting (XSS) vulnerability exists in Solvait version 24.4.2 , a human resource management software. The flaw is caused by insufficient input validation and sanitization within the "Intrest" feature , which allows remote attackers to inject malicious scripts into the applica...
CVE-2024-45920: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting XSS vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in "Intrest" feature...
Solvait 安全漏洞
Solvait is a human resource management software from Solvait, Inc. A security vulnerability exists in Solvait version 24.4.2 that stems from the presence of a stored cross-site scripting XSS vulnerability that allows remote attackers to inject malicious script into the application...
CVE-2024-45920
A Stored Cross-Site Scripting XSS vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in "Intrest" feature...
PT-2024-31848 · Solvait · Solvait
Name of the Vulnerable Software and Affected Versions: Solvait version 24.4.2 Description: A Stored Cross-Site Scripting XSS vulnerability allows remote attackers to inject malicious scripts into the application due to insufficient input validation and sanitization in the "Intrest" feature...