CVE-2023-6655

Summary

CVE-2023-6655 is a critical vulnerability affecting the Hongjing e-HR 2020 system. It lies in an unknown functionality of the /w_selfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree file in the Login Interface component. By manipulating the parentid argument, an attacker can execute SQL injection, potentially gaining unauthorized access. This vulnerability can be exploited remotely and the exploit has been made public, increasing the risk for organizations using the affected product. VDB-247358 is the assigned identifier for this security issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.