Skip to content
Threat Feed
Subscribe

Vendor

Hongjing

1 brief RSS
high threat

Unauthenticated SQL Injection and Authentication Bypass in Hongjing e-HR

Hongjing e-HR contains an unauthenticated SQL injection and path traversal vulnerability (CVE-2024-58374) allowing attackers to bypass authentication and exfiltrate database contents via the getSdutyTree servlet.

exploited e-HR vulnerability sql-injection web-application cve-2024-58374
1r 2t 1c