# horilla. Every CVE that names horilla among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Horilla: Unauthorized Helpdesk Attachment Access via Attachment ID Manipulation](https://agentprime.io/advisories/CVE-2026-40867.md) `CVE-2026-40867` · CVE record: horilla-opensource horilla · CVSS 7.1 High · Not analysed yet · Published 21 Apr 2026 · Tags: Broken access control - [Horilla: Unauthorized Document Overwrite via File Upload Endpoint](https://agentprime.io/advisories/CVE-2026-40866.md) `CVE-2026-40866` · CVE record: horilla-opensource horilla · CVSS 8.6 High · Not analysed yet · Published 21 Apr 2026 · Tags: Broken access control - [Horilla: Insecure Direct Object Reference at \`/employee/view-file/\](https://agentprime.io/advisories/CVE-2026-40865.md) `CVE-2026-40865` · CVE record: horilla-opensource horilla · CVSS 7.1 High · Not analysed yet · Published 21 Apr 2026 · Tags: Broken access control - [horilla-opensource horilla Leads global.js cross site scripting](https://agentprime.io/advisories/CVE-2026-3050.md) `CVE-2026-3050` · CVE record: horilla-opensource horilla · CVSS 5.1 Medium · Not analysed yet · Published 24 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [horilla-opensource horilla Query Parameter global_search.py get redirect](https://agentprime.io/advisories/CVE-2026-3049.md) `CVE-2026-3049` · CVE record: horilla-opensource horilla · CVSS 5.3 Medium · Not analysed yet · Published 24 Feb 2026 · Tags: Open redirect - [Horilla's Improper Access Control Allows Employees to Auto-Approve Documents](https://agentprime.io/advisories/CVE-2026-24039.md) `CVE-2026-24039` · CVE record: horilla-opensource horilla · CVSS 4.3 Medium · Not analysed yet · Published 22 Jan 2026 · Tags: Broken access control - [Horilla HR has 2FA Bypass through its OTP Handling Logic](https://agentprime.io/advisories/CVE-2026-24038.md) `CVE-2026-24038` · CVE record: horilla-opensource horilla · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: Authentication bypass - [Horilla HRM has XSS Bypass through Project Name](https://agentprime.io/advisories/CVE-2026-24037.md) `CVE-2026-24037` · CVE record: horilla-opensource horilla · CVSS 4.8 Medium · Not analysed yet · Published 22 Jan 2026 · Tags: Cross-site scripting (XSS) - [Horilla Exposes Unpublished Job Disclosures through Unauthenticated API](https://agentprime.io/advisories/CVE-2026-24036.md) `CVE-2026-24036` · CVE record: horilla-opensource horilla · CVSS 5.3 Medium · Not analysed yet · Published 22 Jan 2026 · Tags: Broken access control - [Horilla has Improper Access Control Issue that Allows Unauthorized Document Upload on Behalf of Another Employee](https://agentprime.io/advisories/CVE-2026-24035.md) `CVE-2026-24035` · CVE record: horilla-opensource horilla · CVSS 4.3 Medium · Not analysed yet · Published 22 Jan 2026 · Tags: Broken access control - [Horilla has File Upload XSS](https://agentprime.io/advisories/CVE-2026-24034.md) `CVE-2026-24034` · CVE record: horilla-opensource horilla · CVSS 5.4 Medium · Not analysed yet · Published 22 Jan 2026 · Tags: Unrestricted file upload - [Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeover](https://agentprime.io/advisories/CVE-2026-24010.md) `CVE-2026-24010` · CVE record: horilla-opensource horilla · CVSS 8.8 High · Not analysed yet · Published 22 Jan 2026 · Tags: Other injection, CWE-474 - [Horrila Stored XSS Vulnerability via Ticket Comment section](https://agentprime.io/advisories/CVE-2025-59832.md) `CVE-2025-59832` · CVE record: horilla-opensource horilla · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2025 · Tags: Cross-site scripting (XSS) - [Horilla has Improper Input Sanitization Leading to XSS and Admin Account Takeover](https://agentprime.io/advisories/CVE-2025-59525.md) `CVE-2025-59525` · CVE record: horilla-opensource horilla · CVSS 7.7 High · Not analysed yet · Published 24 Sept 2025 · Tags: Cross-site scripting (XSS), Unrestricted file upload - [Horilla Stored XSS Vulnerability via File Upload in Reimbursement Panel](https://agentprime.io/advisories/CVE-2025-59524.md) `CVE-2025-59524` · CVE record: horilla-opensource horilla · CVSS 7.7 High · Not analysed yet · Published 24 Sept 2025 · Tags: Cross-site scripting (XSS), Unrestricted file upload - [Horilla Stored Cross-Site Scripting (XSS) Vulnerability in Project and Task Modules](https://agentprime.io/advisories/CVE-2025-48867.md) `CVE-2025-48867` · CVE record: horilla-opensource horilla · CVSS 4.8 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: Cross-site scripting (XSS) - [Horilla Unauthorized Access to Candidate Resume Files Due to Broken Access Control](https://agentprime.io/advisories/CVE-2025-48869.md) `CVE-2025-48869` · CVE record: horilla-opensource horilla · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2025 · Tags: Broken access control - [Horilla vulnerable to authenticated RCE via eval() in project_bulk_archive](https://agentprime.io/advisories/CVE-2025-48868.md) `CVE-2025-48868` · CVE record: horilla-opensource horilla · CVSS 7.2 High · Not analysed yet · Published 24 Sept 2025 · Tags: Code injection - [Horilla Open Redirect Vulnerability in Login](https://agentprime.io/advisories/CVE-2025-47789.md) `CVE-2025-47789` · CVE record: horilla-opensource horilla · CVSS 6.1 Medium · Not analysed yet · Published 15 May 2025 · Tags: Open redirect - [horilla create_skills deserialization](https://agentprime.io/advisories/CVE-2024-12138.md) `CVE-2024-12138` · CVE record: horilla · CVSS 5.3 Medium · Not analysed yet · Published 4 Dec 2024 · Tags: Insecure deserialization, CWE-20 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .