Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
aEnrich a+HRD - Broken Access Control
Vulnerability Description
aEnrich a+HRD has inadequate privilege restrictions, an unauthenticated remote attacker can use the API function to upload and execute malicious scripts to control the system or disrupt service.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
特权管理不恰当
Vulnerability Title
aEnrich a+HRD 安全漏洞
Vulnerability Description
aEnrich a+HRD是中国育碁（aEnrich）公司的一个全方位人力资源开发化解决方案。 aEnrich a+HRD存在安全漏洞，未经身份验证的远程攻击者可以利用API函数上传并执行恶意脚本来控制系统或中断服务。
CVSS Information
N/A
Vulnerability Type
N/A