Advisories · Technology
horilla.
Every CVE that names horilla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Horilla: Unauthorized Helpdesk Attachment Access via Attachment ID Manipulation
- horilla
- Broken access control
- CVSS 8.6 High
Horilla: Unauthorized Document Overwrite via File Upload Endpoint
- horilla
- Broken access control
- CVSS 7.1 High
Horilla: Insecure Direct Object Reference at `/employee/view-file/<int:id>
- horilla
- Broken access control
- CVSS 5.1 Medium
horilla-opensource horilla Leads global.js cross site scripting
- horilla
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
horilla-opensource horilla Query Parameter global_search.py get redirect
- horilla
- Open redirect
- CVSS 4.3 Medium
Horilla's Improper Access Control Allows Employees to Auto-Approve Documents
- horilla
- Broken access control
- CVSS 8.1 High
Horilla HR has 2FA Bypass through its OTP Handling Logic
- horilla
- Authentication bypass
- CVSS 4.8 Medium
Horilla HRM has XSS Bypass through Project Name
- horilla
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Horilla Exposes Unpublished Job Disclosures through Unauthenticated API
- horilla
- Broken access control
- CVSS 4.3 Medium
Horilla has Improper Access Control Issue that Allows Unauthorized Document Upload on Behalf of Another Employee
- horilla
- Broken access control
- CVSS 5.4 Medium
Horilla has File Upload XSS
- horilla
- Unrestricted file upload
- CVSS 8.8 High
Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeover
- horilla
- Other injection
- CWE-474
- CVSS 9.9 CriticalCritical · CVSS 9+
Horrila Stored XSS Vulnerability via Ticket Comment section
- horilla
- Cross-site scripting (XSS)
- CVSS 7.7 High
Horilla has Improper Input Sanitization Leading to XSS and Admin Account Takeover
- horilla
- Cross-site scripting (XSS)
- Unrestricted file upload
- CVSS 7.7 High
Horilla Stored XSS Vulnerability via File Upload in Reimbursement Panel
- horilla
- Cross-site scripting (XSS)
- Unrestricted file upload
- CVSS 4.8 Medium
Horilla Stored Cross-Site Scripting (XSS) Vulnerability in Project and Task Modules
- horilla
- Cross-site scripting (XSS)
- CVSS 7.5 High
Horilla Unauthorized Access to Candidate Resume Files Due to Broken Access Control
- horilla
- Broken access control
- CVSS 7.2 High
Horilla vulnerable to authenticated RCE via eval() in project_bulk_archive
- horilla
- Code injection
- CVSS 6.1 Medium
Horilla Open Redirect Vulnerability in Login
- horilla
- Open redirect
- CVSS 5.3 Medium
horilla create_skills deserialization
- horilla
- Insecure deserialization
- CWE-20