CVE-2021-35968CWE-22

Learningdigital.com, Inc. Orca HCM - Path Traversal-2

Medium · published July 19, 2021

CVSS v3.1
4.3
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the system directory thru Path Traversal with users’ privileges.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01035 · 63.6th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2021-07-19T11:55Z
EPSS history
Timeline
  • 19 JUL 11:55Z
    Learningdigital.com, Inc. Orca HCM - Path Traversal-2
    cvelistv5