CyberRota Analysis
AI-GeneratedA vulnerability exists in the Password Update Handler of lenve vhr 1.0-SNAPSHOT, specifically in the HrInfoController.updatePass function, where improper authorization can be exploited through manipulated arguments. This flaw allows for remote attacks, potentially enabling unauthorized access to user accounts. Organizations using this component should prioritize remediation, especially given the public availability of the exploit.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Password Update Handler. The manipulation of the argument hrid results in improper authorization. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.