Advisories · Technology
lenve vhr.
Every CVE that names lenve vhr among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs
- lenve vhr
- Information disclosure
- CVSS 5.3 Medium
lenve vhr HrMapper.xml HrInfoController.updateHr privileges management
- lenve vhr
- Privilege escalation
- CVSS 5.3 Medium
lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload
- lenve vhr
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
lenve vhr Password Update pass HrInfoController.updatePass improper authorization
- lenve vhr
- Privilege escalation
- Broken access control
- CVSS 6.9 Medium
lenve vhr vhr.sql default credentials
- lenve vhr
- CWE-1392
- CVSS 5.3 Medium
lenve vhr MailReceiver deserialization
- lenve vhr
- Insecure deserialization
- CWE-20
- CVSS 7.2 High
vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite
- lenve vhr
- Broken access control
- CVSS 7.7 High
vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Change
- lenve vhr
- Broken access control