Threats tagged 'ghsa-v8cj-x2cf-86x7'

A path traversal vulnerability (CWE-22) exists in Bilin Software and Informatics Consultancy Inc.'s HUMANIST Digital Human Resources product, affecting versions from 26.0 up to but not including 26.1. This flaw allows an attacker with low privileges to access restricted directories by manipulating pathnames. The vulnerability has a CVSS 3.1 base score of 6.5, indicating moderate severity with high confidentiality impact but no integrity or availability impact. There are no known exploits in the wild and no official patch information is provided yet.