Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Humanica Component: Humatrix 7 Clear all filters
TI-2019-11298 CVE-2019-15130 · GHSA-v9q3-wwmw-45rq

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an…

Priority MEDIUM 47

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any file type to a candidate's profile picture folder via a crafted recruitment_online/personalData/act_p…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02405 Published 2019-08-18 No fix listed CWE-330
TI-2019-11297 CVE-2019-15129 · GHSA-3h4g-q9gm-hwvc

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an…

Priority LOW 27

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file nam…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.013 Published 2019-08-18 No fix listed CWE-306