horilla — Vulnerabilities & Security Advisories 1

Browse all 1 CVE security advisories affecting horilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by horilla: horilla-hr

Unauthorized Document Overwrite via File Upload Endpoint · Advisory · horilla/horilla-hr · GitHub

Insecure Direct Object Reference at `/employee/view-file/<int:id> · Advisory · horilla/horilla-hr · GitHub

HighCVE-2026-408672026-04-22

Unauthorized Helpdesk Attachment Access via Attachment ID Manipulation · Advisory · horilla/horilla-hr · GitHub

Medium2026-02-24

[FIX] STATIC: Fixed xss vulnerability issue in summer note · horilla-opensource/horilla-crm@fc5c8e5 · GitHub

HighCVE-2026-240382026-01-27

2FA Bypass in Horilla HR Software ≥ 1.4.0 · Advisory · horilla-opensource/horilla · GitHub

MediumCVE-2026-240362026-01-27

Unauthenticated Arbitrary Unpublished Job Disclosure in Horilla HR Software ≥ 1.4.0 · Advisory · horilla-opensource/hori

HighCVE-2025-595242025-09-26

Stored XSS via File Upload in Reimbursement Panel · Advisory · horilla-opensource/horilla · GitHub

Medium2025-09-26

Stored Cross-Site Scripting (XSS) in Project and Task Modules in Horilla v1.3 · Advisory · horilla-opensource/horilla ·

HighCVE-2025-488692025-09-26

Unauthorized Access to Candidate Resume Files Due to Broken Access Control in Horilla v1.3 · Advisory · horilla-opensour

HighCVE-2023-489882025-09-25

Authenticated RCE via eval() in project_bulk_archive – Horilla v1.3 · Advisory · horilla-opensource/horilla · GitHub

Showing up to 20 recent security advisories. View all →

This page lists every published CVE security advisory associated with horilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.