CVE-2024-2633 Multiple vulnerabilities on Meta4 HR from Cegid

A Cross-Site Scripting Vulnerability has been found on Meta4 HR affecting version 819.001.022 and earlier. The endpoint '/sitetest/english/dumpenv.jsp' is vulnerable to XSS attack by 'lang' query, i.e. '/sitetest/english/dumpenv.jsp?snoop=yes&lang=%27%3Cimg%20src/onerror=alert1%3E&params'...

CVE-2024-2633

CVE-2024-2633 affects Meta4 HR versions 819.001.022 and earlier. The vulnerability is a Cross-Site Scripting (XSS) in the endpoint /sitetest/english/dumpenv.jsp, exploitable via the lang query parameter (example: /dumpenv.jsp?snoop=yes&lang=%27%3Cimg%20src/onerror=alert(1)%3E&params). Affects the...

CVE-2024-2632 Information Exposure Vulnerability on Meta4 HR

A Information Exposure Vulnerability has been found on Meta4 HR. This vulnerability allows an attacker to obtain a lot of information about the application such as the variables set in the process, the Tomcat versions, library versions and underlying operation system via HTTP GET...

CVE-2024-2632 Information Exposure Vulnerability on Meta4 HR

A Information Exposure Vulnerability has been found on Meta4 HR. This vulnerability allows an attacker to obtain a lot of information about the application such as the variables set in the process, the Tomcat versions, library versions and underlying operation system via HTTP GET...

CVE-2024-2632

Summary: CVE-2024-2632 is an information-exposure vulnerability in Meta4 HR exposed via HTTP GET to /sitetest/english/dumpenv.jsp. The endpoint reportedly leaks substantial environment details, including process variables, Tomcat version, library versions, and underlying OS. Sources across NVD/CV...

Meta4 HR Cross-Site Scripting Vulnerability

Cegid Meta4 HR is a human resource management software HRM platform from Cegid Corporation. A cross-site scripting vulnerability exists in Meta4 HR version 819.001.022 and earlier, which stems from a cross-site scripting XSS vulnerability in the endpoint /sitetest/english/dumpenv.jsp...

Meta4 HR Code Issue Vulnerability

Cegid Meta4 HR is a human resource management software HRM platform from Cegid. A code issue vulnerability exists in Meta4 HR version 819.001.022 and earlier, which stems from a file upload vulnerability in file /config/espanol/updatepassword.jsp...

PT-2024-21351 · Apache · Apache Tomcat

Name of the Vulnerable Software and Affected Versions: Meta4 HR affected versions not specified Description: A vulnerability has been found that allows an attacker to obtain information about the application, including variables set in the process, Tomcat versions, library versions, and the...

Meta4 HR security breach

Cegid Meta4 HR is a human resource management software HRM platform from Cegid Corporation. A security vulnerability exists in Meta4 HR version 819.001.022 and prior versions, which stems from a configuration page being placed on an Internet-facing web server, resulting in a file path being expos...

PT-2024-21368 · Cegid · Cegid Meta4 Hr

Name of the Vulnerable Software and Affected Versions: Cegid Meta4 HR affected versions not specified Description: An Unrestricted Upload of File issue allows an attacker to upload malicious files to the server via the "/config/espanol/update password.jsp" file. By modifying the M4 NEW PASSWORD...

Meta4 HR Cross-Site Scripting Vulnerability

Cegid Meta4 HR is a human resource management software HRM platform from Cegid. A cross-site scripting vulnerability exists in Meta4 HR version 819.001.022 and earlier, which stems from a cross-site scripting XSS vulnerability in the endpoint /segenerico/genericologin.jsp...

Meta4 HR Information Disclosure Vulnerability

Cegid Meta4 HR is a human resource management software HRM platform from Cegid Corporation. An information disclosure vulnerability exists in Meta4 HR version 819.001.022 and prior versions, which stems from the presence of an information disclosure vulnerability. An attacker can exploit this...

PT-2024-21353 · Meta4 · Meta4 Hr

Name of the Vulnerable Software and Affected Versions: Meta4 HR versions 819.001.022 and earlier Description: A Cross-Site Scripting issue has been identified. The endpoint "/sitetest/english/dumpenv.jsp" is vulnerable to an XSS attack via the lang query. For example, the URL...