Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:wukong_hrm:wukong_hrm:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Authentication Bypass in Wukong_HRM ParamAspect

Wukong_HRM up to commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to access sensitive HR administrative API endpoints.

Wukong_HRM authentication-bypass web-application data-exfiltration
1r 1t 1c