CVE-2021-35967CWE-22

Learningdigital.com, Inc. Orca HCM - Path Traversal-1

Medium · published July 19, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
70.6
In the wild
Unconfirmed
What it is

The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attackers can access the system directory thru Path Traversal without logging in.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01318 · 70.6th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2021-07-19T11:55Z
EPSS history
Timeline
  • 19 JUL 11:55Z
    Learningdigital.com, Inc. Orca HCM - Path Traversal-1
    cvelistv5