medium4.3
CVE-2021-35968
The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly.
Impact
The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the system directory thru Path Traversal with users’ privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Learningdigital | Orca Hcm | through 10.0 |