CVE-2022-26676 — aEnrich a+HRD - Broken Access Control
aEnrich a+HRD has inadequate privilege restrictions, an unauthenticated remote attacker can use the API function to upload and execute malicious scripts to control the system or…
Published: 2022-04-07 · CVSS: 9.8 · CVSS 3.1
aEnrich a+HRD has inadequate privilege restrictions, an unauthenticated remote attacker can use the API function to upload and execute malicious scripts to control the system or disrupt service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7