Beveiligingsadvies

CVE-2026-41513

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-12 16:43:50

Laatst bijgewerkt 2026-05-13 12:43:21

Toegewezen door GitHub_M

CVSS-score 4.8

Status PUBLISHED

Beschrijving

Horilla is an HR and CRM software. In 1.5.0, the notification endpoints trust the unvalidated next parameter and redirect users to arbitrary external URLs. This allows an attacker to turn trusted application links into phishing or social-engineering redirects.

← Alle CVE's bekijken Bekijk op cve.org ↗