Vulnerability in Orangehrm

CVE-2007-5931

The reDirect function in lib/controllers/RepViewController.php in OrangeHRM before 2.2.2 does not verify the privileges of a user, which allows remote attackers to obtain access to data via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 0.013 (66.5th percentile) — read the EPSS interpretation.

Affected products

Orangehrm
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)