Skip to content
Threat Feed
Subscribe

Vendor

Wukong_HRM

1 brief RSS
critical advisory

Authentication Bypass in Wukong_HRM ParamAspect

Wukong_HRM up to commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to access sensitive HR administrative API endpoints.

Wukong_HRM authentication-bypass web-application data-exfiltration
1r 1t 1c