Security Advisory
CVE-2024-8585
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker with regular privileges to download arbitrary system files.