Lucene search
+L

2 matches found

OSV
OSV
added 2019/08/18 5:15 p.m.8 views

CVE-2019-15129

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file name, such as in a recruitmentonline/upload/user/userid/photo/filename URI...

5.3CVSS6.1AI score0.013EPSS
SaveExploits1References1
NVD
NVD
added 2019/08/18 5:15 p.m.29 views

CVE-2019-15129

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file name, such as in a recruitmentonline/upload/user/userid/photo/filename URI...

5.3CVSS5.3AI score0.013EPSS
SaveExploits1References1
Rows per page
Query Builder