TI-2023-30649 CVE-2023-54399 · GHSA-6j7f-83xh-j3x3
Hongjing e-HR < 8.2 SQL Injection via /servlet/codesettree
Priority HIGH 81
Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint where the categories query parameter is passed to a database query without sanitization after HRMS-encoding is stripped…