Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insecure Direct Object Reference in GPS BOLD Workplanner
Vulnerability Description
Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to calendar details using unauthorised internal identifiers.
CVSS Information
N/A
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
BOLD Workplanner 安全漏洞
Vulnerability Description
Bold Workplanner是西班牙Bold Workplanner公司的一款人力资源管理的企业软件。 BOLD Workplanner 2.5.25之前版本存在安全漏洞，该漏洞源于缺乏足够的用户输入验证，可能导致经过身份验证的用户使用未经授权的内部标识符访问日历详细信息。
CVSS Information
N/A
Vulnerability Type
N/A