Meta4 HR vulnerabilities
3 known vulnerabilities in Meta4 HR from Cegid. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.0 Critical severity
Meta4 HR: Unrestricted Upload of File with Dangerous Type
An Unrestricted Upload of File vulnerability has been found on Cegid Meta4 HR, that allows an attacker to upload malicios files to the server via '/config/espanol/update_password.jsp' file. Modifying the 'M4_NEW_PASSWORD' parameter, an attacker could store a m
- 7.3 High severity
Meta4 HR: Execution After Redirect (EAR)
The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client, who can be an attacker. Instead of rewriting these pages to avoid this vulnerability, they will be dismissed from future
- 7.5 High severity
Meta4 HR: Exposure of Sensitive Information to an Unauthorized Actor
A Information Exposure Vulnerability has been found on Meta4 HR. This vulnerability allows an attacker to obtain a lot of information about the application such as the variables set in the process, the Tomcat versions, library versions and underlying operation