medium6.5
CVE-2024-8585
Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker with regular privi…
Impact
Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker with regular privileges to download arbitrary system files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Learningdigital | Orca Hcm | before 11.0 |