agentprime: horillaEvery new CVE for horilla.https://agentprime.io/CVE-2026-40867: Horilla: Unauthorized Helpdesk Attachment Access via Attachment ID Manipulationhttps://agentprime.io/advisories/CVE-2026-40867/https://agentprime.io/advisories/CVE-2026-40867/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 18:16:29 GMTCVECVE-2026-40866: Horilla: Unauthorized Document Overwrite via File Upload Endpointhttps://agentprime.io/advisories/CVE-2026-40866/https://agentprime.io/advisories/CVE-2026-40866/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 18:15:30 GMTCVECVE-2026-40865: Horilla: Insecure Direct Object Reference at `/employee/view-file/<int:id>https://agentprime.io/advisories/CVE-2026-40865/https://agentprime.io/advisories/CVE-2026-40865/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 18:14:19 GMTCVECVE-2026-3050: horilla-opensource horilla Leads global.js cross site scriptinghttps://agentprime.io/advisories/CVE-2026-3050/https://agentprime.io/advisories/CVE-2026-3050/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Feb 2026 01:02:09 GMTCVECVE-2026-3049: horilla-opensource horilla Query Parameter global_search.py get redirecthttps://agentprime.io/advisories/CVE-2026-3049/https://agentprime.io/advisories/CVE-2026-3049/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Feb 2026 00:32:11 GMTCVECVE-2026-24039: Horilla's Improper Access Control Allows Employees to Auto-Approve Documentshttps://agentprime.io/advisories/CVE-2026-24039/https://agentprime.io/advisories/CVE-2026-24039/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jan 2026 03:43:41 GMTCVECVE-2026-24038: Horilla HR has 2FA Bypass through its OTP Handling Logichttps://agentprime.io/advisories/CVE-2026-24038/https://agentprime.io/advisories/CVE-2026-24038/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jan 2026 03:39:06 GMTCVECVE-2026-24037: Horilla HRM has XSS Bypass through Project Namehttps://agentprime.io/advisories/CVE-2026-24037/https://agentprime.io/advisories/CVE-2026-24037/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jan 2026 03:31:37 GMTCVECVE-2026-24036: Horilla Exposes Unpublished Job Disclosures through Unauthenticated APIhttps://agentprime.io/advisories/CVE-2026-24036/https://agentprime.io/advisories/CVE-2026-24036/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jan 2026 03:21:32 GMTCVECVE-2026-24035: Horilla has Improper Access Control Issue that Allows Unauthorized Document Upload on Behalf of Another Employeehttps://agentprime.io/advisories/CVE-2026-24035/https://agentprime.io/advisories/CVE-2026-24035/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jan 2026 02:43:10 GMTCVECVE-2026-24034: Horilla has File Upload XSShttps://agentprime.io/advisories/CVE-2026-24034/https://agentprime.io/advisories/CVE-2026-24034/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jan 2026 02:41:37 GMTCVECVE-2026-24010: Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeoverhttps://agentprime.io/advisories/CVE-2026-24010/https://agentprime.io/advisories/CVE-2026-24010/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jan 2026 02:37:19 GMTCVECVE-2025-59832: Horrila Stored XSS Vulnerability via Ticket Comment sectionhttps://agentprime.io/advisories/CVE-2025-59832/https://agentprime.io/advisories/CVE-2025-59832/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Sep 2025 14:45:19 GMTCVEcriticalCVE-2025-59525: Horilla has Improper Input Sanitization Leading to XSS and Admin Account Takeoverhttps://agentprime.io/advisories/CVE-2025-59525/https://agentprime.io/advisories/CVE-2025-59525/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Sep 2025 18:15:12 GMTCVECVE-2025-59524: Horilla Stored XSS Vulnerability via File Upload in Reimbursement Panelhttps://agentprime.io/advisories/CVE-2025-59524/https://agentprime.io/advisories/CVE-2025-59524/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Sep 2025 18:12:55 GMTCVECVE-2025-48867: Horilla Stored Cross-Site Scripting (XSS) Vulnerability in Project and Task Moduleshttps://agentprime.io/advisories/CVE-2025-48867/https://agentprime.io/advisories/CVE-2025-48867/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Sep 2025 17:25:42 GMTCVECVE-2025-48869: Horilla Unauthorized Access to Candidate Resume Files Due to Broken Access Controlhttps://agentprime.io/advisories/CVE-2025-48869/https://agentprime.io/advisories/CVE-2025-48869/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Sep 2025 17:17:40 GMTCVECVE-2025-48868: Horilla vulnerable to authenticated RCE via eval() in project_bulk_archivehttps://agentprime.io/advisories/CVE-2025-48868/https://agentprime.io/advisories/CVE-2025-48868/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Sep 2025 13:51:04 GMTCVECVE-2025-47789: Horilla Open Redirect Vulnerability in Loginhttps://agentprime.io/advisories/CVE-2025-47789/https://agentprime.io/advisories/CVE-2025-47789/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 May 2025 19:50:28 GMTCVECVE-2024-12138: horilla create_skills deserializationhttps://agentprime.io/advisories/CVE-2024-12138/https://agentprime.io/advisories/CVE-2024-12138/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Dec 2024 14:00:14 GMTCVE