Skip to content
Threat Feed
Subscribe

Vendor

Inspur

1 brief RSS
high threat

Arbitrary File Read in Inspur Haiyue HCM Cloud

An unauthenticated arbitrary file read vulnerability (CVE-2024-58387) in Inspur Haiyue HCM Cloud allows remote attackers to disclose sensitive system files via the /api/model_report/file/download endpoint.

exploited Haiyue HCM Cloud web-application-vulnerability arbitrary-file-read directory-traversal
1r 1t 1c