A vulnerability in Bilin Software and Informatics Consultancy Inc.'s HUMANIST Digital Human Resources product allows sensitive information to be exposed via the use of the GET request method with sensitive query strings, potentially enabling session hijacking. This affects versions from 26.0 up to but not including 26.1.