Security Advisory
CVE-2021-35968
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the system directory thru Path Traversal with users’ privileges.