CVE-2019-12839

In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration (txtSendmailPath parameter) that allows authenticated…

published June 15, 2019

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration (txtSendmailPath parameter) that allows authenticated attackers to achieve arbitrary command execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04369 · 91.2th percentile
Published
2019-06-15T19:27Z
EPSS history
Timeline
  • 15 JUN 19:27Z
    In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration (txtSendmailPath parameter) that allows authenticated…
    cvelistv5