PT-2024-21351 · Apache · Apache Tomcat

Name of the Vulnerable Software and Affected Versions: Meta4 HR affected versions not specified Description: A vulnerability has been found that allows an attacker to obtain information about the application, including variables set in the process, Tomcat versions, library versions, and the...

Meta4 HR Information Disclosure Vulnerability

Cegid Meta4 HR is a human resource management software HRM platform from Cegid Corporation. An information disclosure vulnerability exists in Meta4 HR version 819.001.022 and prior versions, which stems from the presence of an information disclosure vulnerability. An attacker can exploit this...

CVE-2024-2633: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting Vulnerability has been found on Meta4 HR affecting version 819.001.022 and earlier. The endpoint '/sitetest/english/dumpenv.jsp' is vulnerable to XSS attack by 'lang' query, i.e. '/sitetest/english/dumpenv.jsp?snoop=yes&lang=%27%3Cimg%20src/onerror=alert1%3E&params'...

CVE-2024-2632: Exposure of Sensitive Information to an Unauthorized Actor

A Information Exposure Vulnerability has been found on Meta4 HR. This vulnerability allows an attacker to obtain a lot of information about the application such as the variables set in the process, the Tomcat versions, library versions and underlying operation system via HTTP GET...