Haiyue HCM Cloud vulnerabilities
1 known vulnerability in Haiyue HCM Cloud from Inspur. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
Haiyue HCM Cloud: Improper Limitation of a Pathname to a Restricted Directory
Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can cra