漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
An issue was discovered in SAP E-Recruiting (aka ERECRUIT) 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and confirm email addresses that they do not have access to (candidate_hrobject is predictable and corr_act_guid is improperly validated). Furthermore, since an email address can be registered only once, an attacker could prevent other legitimate users from registering. This is SAP Security Note 2507798.
漏洞信息
N/A
漏洞
N/A
漏洞
SAP E-Recruiting 输入验证漏洞
漏洞信息
SAP E-Recruiting(又名ERECRUIT)是德国思爱普(SAP)公司的一套电子招聘系统。该系统具有人员自动筛选、过滤和排序等功能。 SAP E-Recruiting 605版本至617版本中存在安全漏洞。远程攻击者可利用该漏洞造成拒绝服务(其他用户无法注册)。
漏洞信息
N/A
漏洞
N/A