CVE-2024-25214

2024-02-1400:00:00

mitre

github.com

authentication bypass

employee managment system

vulnerability

e-mail injection

password injection

AI Score

7.1

Confidence

Low

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:sherlock:employee_management_system:1.0:*:*:*:*:*:*:*"
    ],
    "vendor": "sherlock",
    "product": "employee_management_system",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]