CVE-2021-35967 — Learningdigital.com, Inc. Orca HCM - Path Traversal-1
The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attackers can access the system directory thru Path Traversal w…
Published: 2021-07-19 · CVSS: 5.3 · CVSS 3.1
The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attackers can access the system directory thru Path Traversal without logging in.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7