horilla kayıtları
horilla üreticisine ait 17 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %58,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-284 Improper Access Control4
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-20 Improper Input Validation1
- CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
17 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-59832İstismar yok | Horrila Stored XSS Vulnerability via Ticket Comment sectionhorilla · horilla · CWE-79 | Kritik9,9 | — | %0,4 | 25 Eyl 2025 |
32İzleyin | CVE-2026-24038İstismar yok | Horilla HR has 2FA Bypass through its OTP Handling Logichorilla · horilla · CWE-287 | Yüksek8,1 | — | %0,4 | 22 Oca 2026 |
32İzleyin | CVE-2026-24010İstismar yok | Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeoverhorilla · horilla · CWE-74 | Yüksek8,0 | — | %0,4 | 21 Oca 2026 |
30İzleyin | CVE-2025-48869İstismar yok | Horilla Unauthorized Access to Candidate Resume Files Due to Broken Access Controlhorilla · horilla · CWE-284 | Yüksek7,5 | — | %0,4 | 24 Eyl 2025 |
30İzleyin | CVE-2025-59524İstismar yok | Horilla Stored XSS Vulnerability via File Upload in Reimbursement Panelhorilla · horilla · CWE-79 | Yüksek7,7 | — | %0,3 | 24 Eyl 2025 |
30İzleyin | CVE-2025-59525İstismar yok | Horilla has Improper Input Sanitization Leading to XSS and Admin Account Takeoverhorilla · horilla · CWE-79 | Yüksek7,7 | — | %0,2 | 24 Eyl 2025 |
29İzleyin | CVE-2025-48868Kavram kanıtı | Horilla vulnerable to authenticated RCE via eval() in project_bulk_archivehorilla · horilla · CWE-95 | Yüksek7,2 | — | %2,4 | 24 Eyl 2025 |
24İzleyin | CVE-2025-47789İstismar yok | Horilla Open Redirect Vulnerability in Loginhorilla · horilla · CWE-601 | Orta6,1 | — | %0,2 | 15 May 2025 |
21İzleyin | CVE-2024-12138İstismar yok | horilla create_skills deserializationhorilla · horilla · CWE-20 | Orta5,3 | — | %0,7 | 4 Ara 2024 |
21İzleyin | CVE-2026-24036İstismar yok | Horilla Exposes Unpublished Job Disclosures through Unauthenticated APIhorilla · horilla · CWE-284 | Orta5,3 | — | %0,5 | 22 Oca 2026 |
21İzleyin | CVE-2026-24037İstismar yok | Horilla HRM has XSS Bypass through Project Namehorilla · horilla · CWE-79 | Orta5,4 | — | %0,2 | 22 Oca 2026 |
21İzleyin | CVE-2026-24034İstismar yok | Horilla has File Upload XSShorilla · horilla · CWE-434 | Orta5,4 | — | %0,2 | 22 Oca 2026 |
19İzleyin | CVE-2025-48867İstismar yok | Horilla Stored Cross-Site Scripting (XSS) Vulnerability in Project and Task Moduleshorilla · horilla · CWE-79 | Orta4,8 | — | %0,2 | 24 Eyl 2025 |
17İzleyin | CVE-2026-24035İstismar yok | Horilla has Improper Access Control Issue that Allows Unauthorized Document Upload on Behalf of Another Employeehorilla · horilla · CWE-284 | Orta4,3 | — | %0,3 | 22 Oca 2026 |
17İzleyin | CVE-2026-24039İstismar yok | Horilla's Improper Access Control Allows Employees to Auto-Approve Documentshorilla · horilla · CWE-284 | Orta4,3 | — | %0,2 | 22 Oca 2026 |
8İzleyin | CVE-2026-3049İstismar yok | horilla-opensource horilla Query Parameter global_search.py get redirecthorilla · horilla · CWE-601 | Düşük2,1 | — | %0,4 | 23 Şub 2026 |
8İzleyin | CVE-2026-3050İstismar yok | horilla-opensource horilla Leads global.js cross site scriptinghorilla · horilla · CWE-79 | Düşük2,0 | — | %0,2 | 23 Şub 2026 |
- CVE-2025-5983239İzleyin
Horrila Stored XSS Vulnerability via Ticket Comment section
KritikCVSS 9,9İstismar yokEPSS %0horilla · horilla25 Eyl 2025
- CVE-2026-2403832İzleyin
Horilla HR has 2FA Bypass through its OTP Handling Logic
YüksekCVSS 8,1İstismar yokEPSS %0horilla · horilla22 Oca 2026
- CVE-2026-2401032İzleyin
Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeover
YüksekCVSS 8,0İstismar yokEPSS %0horilla · horilla21 Oca 2026
- CVE-2025-4886930İzleyin
Horilla Unauthorized Access to Candidate Resume Files Due to Broken Access Control
YüksekCVSS 7,5İstismar yokEPSS %0horilla · horilla24 Eyl 2025
- CVE-2025-5952430İzleyin
Horilla Stored XSS Vulnerability via File Upload in Reimbursement Panel
YüksekCVSS 7,7İstismar yokEPSS %0horilla · horilla24 Eyl 2025
- CVE-2025-5952530İzleyin
Horilla has Improper Input Sanitization Leading to XSS and Admin Account Takeover
YüksekCVSS 7,7İstismar yokEPSS %0horilla · horilla24 Eyl 2025
- CVE-2025-4886829İzleyin
Horilla vulnerable to authenticated RCE via eval() in project_bulk_archive
YüksekCVSS 7,2Kavram kanıtıEPSS %2horilla · horilla24 Eyl 2025
- CVE-2025-4778924İzleyin
Horilla Open Redirect Vulnerability in Login
OrtaCVSS 6,1İstismar yokEPSS %0horilla · horilla15 May 2025
- CVE-2024-1213821İzleyin
horilla create_skills deserialization
OrtaCVSS 5,3İstismar yokEPSS %0horilla · horilla4 Ara 2024
- CVE-2026-2403621İzleyin
Horilla Exposes Unpublished Job Disclosures through Unauthenticated API
OrtaCVSS 5,3İstismar yokEPSS %0horilla · horilla22 Oca 2026
- CVE-2026-2403721İzleyin
Horilla HRM has XSS Bypass through Project Name
OrtaCVSS 5,4İstismar yokEPSS %0horilla · horilla22 Oca 2026
- CVE-2026-2403421İzleyin
Horilla has File Upload XSS
OrtaCVSS 5,4İstismar yokEPSS %0horilla · horilla22 Oca 2026
- CVE-2025-4886719İzleyin
Horilla Stored Cross-Site Scripting (XSS) Vulnerability in Project and Task Modules
OrtaCVSS 4,8İstismar yokEPSS %0horilla · horilla24 Eyl 2025
- CVE-2026-2403517İzleyin
Horilla has Improper Access Control Issue that Allows Unauthorized Document Upload on Behalf of Another Employee
OrtaCVSS 4,3İstismar yokEPSS %0horilla · horilla22 Oca 2026
- CVE-2026-2403917İzleyin
Horilla's Improper Access Control Allows Employees to Auto-Approve Documents
OrtaCVSS 4,3İstismar yokEPSS %0horilla · horilla22 Oca 2026
- CVE-2026-30498İzleyin
horilla-opensource horilla Query Parameter global_search.py get redirect
DüşükCVSS 2,1İstismar yokEPSS %0horilla · horilla23 Şub 2026
- CVE-2026-30508İzleyin
horilla-opensource horilla Leads global.js cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0horilla · horilla23 Şub 2026