CVE-2019-14932

The Recruitment module in Humanica Humatrix 7 1.0.0.681 and 1.0.0.203 allows remote attackers to access all candidates' information on the website via a modified selApp variable to personalData/resumeDetail.cfm. This includes personal information and other sensitive data...

CVE-2019-14932: Authorization Bypass Through User-Controlled Key

The Recruitment module in Humanica Humatrix 7 1.0.0.681 and 1.0.0.203 allows remote attackers to access all candidates' information on the website via a modified selApp variable to personalData/resumeDetail.cfm. This includes personal information and other sensitive data...

PT-2019-13874

Name of the Vulnerable Software and Affected Versions Humanica Humatrix versions 1.0.0.681 and 1.0.0.203 Description The issue allows remote attackers to access sensitive data, including personal information, by modifying the selApp variable to access the "personalData/resumeDetail.cfm" endpoint...