CVE-2026-24035

概要

参考情報

• drive.google.com/file/d/1i00-NnipvxH8bGY-SyqEjnDQfxIbVGRR/view · Exploit
• horilla-opensource/horilla release 1.5.0 · Release Notes
• horilla-opensource/horilla security advisory · Exploit

horilla のその他の脆弱性

• CVE-2026-3050中 5.4A flaw has been found in horilla-opensource horilla up to 1.0.2. Impacted is an unknown function of the file static/assets/js/global.js of t…
• CVE-2026-3049中 6.1A vulnerability was detected in horilla-opensource horilla up to 1.0.2. This issue affects the function get of the file horilla_generics/glo…
• CVE-2026-24039中 4.3Horilla is a free and open source Human Resource Management System (HRMS). Version 1.4.0 has Improper Access Control, allowing low-privilege…
• CVE-2026-24038高 8.1Horilla is a free and open source Human Resource Management System (HRMS). In version 1.4.0, the OTP handling logic has a flawed equality ch…
• CVE-2026-24037中 5.4Horilla is a free and open source Human Resource Management System (HRMS). In version 1.4.0, the has_xss() function attempts to block XSS by…