Threats tagged 'ghsa-m2j3-h9wr-6fv2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-73580Apache OFBiz · Missing Authorization Check High2026-11-05GCVE DatabaseCVE-2026-73580 A missing authorization check in the getHRChild service of Apache OFBiz versions through 24.09.07 allows remote unauthenticated attackers to recursively enumerate sensitive Human Resources data, including department and position identifiers, employee party identifiers, and organizational relationships. This issue is fixed in version 24.09.08. Report on CVE-2026-73580 Vulnerability CWE-200 #ghsa-m2j3-h9wr-6fv2	GCVE Database	2026-11-05

Page 1 of 1