https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 17:56:39 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-110099 <p>Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller&#39;s exportLeaves, exportOvertime and exportEmployees actions, allowing any authenticated user to export HR data. Attackers can request hr/exportEmployees or hr/exportLeaves/{id} and hr/exportOvertime/{id} to download employee names, emails, contracts, managers, and any employee&#39;s leave and overtime records.</p> <p>Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller&#39;s exportLeaves, exportOvertime and exportEmployees actions, allowing any authenticated user to export HR data. Attackers can request hr/exportEmployees or hr/exportLeaves/{id} and hr/exportOvertime/{id} to download employee names, emails, contracts, managers, and any employee&#39;s leave and overtime records.</p> https://db.gcve.eu/vuln/fkie_cve-2026-110099 https://db.gcve.eu/vuln/ghsa-cf27-x93f-gg54 <p>Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller&#39;s exportLeaves, exportOvertime and exportEmployees actions, allowing any authenticated user to export HR data. Attackers can request hr/exportEmployees or hr/exportLeaves/{id} and hr/exportOvertime/{id} to download employee names, emails, contracts, managers, and any employee&#39;s leave and overtime records.</p> <p>Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller&#39;s exportLeaves, exportOvertime and exportEmployees actions, allowing any authenticated user to export HR data. Attackers can request hr/exportEmployees or hr/exportLeaves/{id} and hr/exportOvertime/{id} to download employee names, emails, contracts, managers, and any employee&#39;s leave and overtime records.</p> https://db.gcve.eu/vuln/ghsa-cf27-x93f-gg54