horilla-opensource vulnerabilities

Products

• horilla 17

Latest horilla-opensource CVEs

Newest publication first

1. CVE-2026-40867 Horilla: Unauthorized Helpdesk Attachment Access via Attachment ID Manipulation

   Published 2026-04-21

   High·CVSS 7.1 EPSS 0.21%

   Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, a broken access control vulnerability in the helpdesk attachment viewer allows any authenticated user to view attachments from other tickets by changing the attachment ID. This can expose sensiti...

2. CVE-2026-40866 Horilla: Unauthorized Document Overwrite via File Upload Endpoint

   Published 2026-04-21

   High·CVSS 8.6 EPSS 0.21%

   Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an insecure direct object reference in the employee document upload endpoint allows any authenticated user to overwrite or replace or corrupt another employee’s document by changing the document...

3. CVE-2026-40865 Horilla: Insecure Direct Object Reference at `/employee/view-file/<int:id>

   Published 2026-04-21

   High·CVSS 7.1 EPSS 0.17%

   Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an insecure direct object reference in the employee document viewer allows any authenticated user to access other employees’ uploaded documents by changing the document ID in the request. This ex...

4. CVE-2026-24039 Horilla's Improper Access Control Allows Employees to Auto-Approve Documents

   Published 2026-01-22

   Medium·CVSS 4.3 EPSS 0.27%

   Horilla is a free and open source Human Resource Management System (HRMS). Version 1.4.0 has Improper Access Control, allowing low-privileged employees to self-approve documents they have uploaded. The document-approval UI is intended to be restricted to administrator or high-pri...

5. CVE-2026-24038 Horilla HR has 2FA Bypass through its OTP Handling Logic

   Published 2026-01-22

   High·CVSS 8.1 EPSS 0.48%

   Horilla is a free and open source Human Resource Management System (HRMS). In version 1.4.0, the OTP handling logic has a flawed equality check that can be bypassed. When an OTP expires, the server returns None, and if an attacker omits the otp field from their POST request, the...

6. CVE-2026-24037 Horilla HRM has XSS Bypass through Project Name

   Published 2026-01-22

   Medium·CVSS 5.4 EPSS 0.26%

   Horilla is a free and open source Human Resource Management System (HRMS). In version 1.4.0, the has_xss() function attempts to block XSS by matching input against a set of regex patterns. However, the regexes are incomplete and context-agnostic, making them easy to bypass. Attac...

7. CVE-2026-24036 Horilla Exposes Unpublished Job Disclosures through Unauthenticated API

   Published 2026-01-22

   Medium·CVSS 5.3 EPSS 0.50%

   Horilla is a free and open source Human Resource Management System (HRMS). Versions 1.4.0 and above expose unpublished job postings through the /recruitment/recruitment-details// endpoint without authentication. The response includes draft job titles, descriptions and application...

8. CVE-2026-24035 Horilla has Improper Access Control Issue that Allows Unauthorized Document Upload on Behalf of Another Employee

   Published 2026-01-22

   Medium·CVSS 4.3 EPSS 0.31%

   Horilla is a free and open source Human Resource Management System (HRMS). An Improper Access Control vulnerability exists in Horilla HR Software starting in version 1.4.0 and prior to version 1.5.0, allowing any authenticated employee to upload documents on behalf of another emp...

9. CVE-2026-24034 Horilla has File Upload XSS

   Published 2026-01-22

   Medium·CVSS 5.4 EPSS 0.25%

   Horilla is a free and open source Human Resource Management System (HRMS). In versions prior to 1.5.0, a cross-site scripting vulnerability can be triggered because the extension and content-type are not checked during the profile photo update step. Version 1.5.0 fixes the issue.

10. CVE-2026-24010 Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeover

    Published 2026-01-22

    High·CVSS 8.0 EPSS 0.47%

    Horilla is a free and open source Human Resource Management System (HRMS). A critical File Upload vulnerability in versions prior to 1.5.0, with Social Engineering, allows authenticated users to deploy phishing attacks. By uploading a malicious HTML file disguised as a profile pi...

11. CVE-2025-59832 Horrila Stored XSS Vulnerability via Ticket Comment section

    Published 2025-09-25

    Critical·CVSS 9.9 EPSS 0.42%

    Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket comment editor. A low-privilege authenticated user could run arbitrary JavaScript in an admin’s browser, exfiltrate the admin’s coo...

12. CVE-2025-59525 Horilla has Improper Input Sanitization Leading to XSS and Admin Account Takeover

    Published 2025-09-24

    High·CVSS 7.7 EPSS 0.29%

    Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, improper sanitization across the application allows XSS via uploaded SVG (and via allowed <embed>), which can be chained to execute JavaScript whenever users view impacted content (...

13. CVE-2025-59524 Horilla Stored XSS Vulnerability via File Upload in Reimbursement Panel

    Published 2025-09-24

    High·CVSS 7.7 EPSS 0.35%

    Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, the file upload flow performs validation only in the browser and does not enforce server-side checks. An attacker can bypass the client-side validation (for example, with an interce...

14. CVE-2025-48867 Horilla Stored Cross-Site Scripting (XSS) Vulnerability in Project and Task Modules

    Published 2025-09-24

    Medium·CVSS 4.8 EPSS 0.24%

    Horilla is a free and open source Human Resource Management System (HRMS). A stored cross-site scripting (XSS) vulnerability in Horilla HRM 1.3.0 allows authenticated admin or privileged users to inject malicious JavaScript payloads into multiple fields in the Project and Task mo...

15. CVE-2025-48869 Horilla Unauthorized Access to Candidate Resume Files Due to Broken Access Control

    Published 2025-09-24

    High·CVSS 7.5 EPSS 0.43%

    Horilla is a free and open source Human Resource Management System (HRMS). Unauthenticated users can access uploaded resume files in Horilla 1.3.0 by directly guessing or predicting file URLs. These files are stored in a publicly accessible directory, allowing attackers to retrie...

16. CVE-2025-48868 Horilla vulnerable to authenticated RCE via eval() in project_bulk_archive

    Published 2025-09-24

    High·CVSS 7.2 EPSS 2.5%

    Horilla is a free and open source Human Resource Management System (HRMS). An authenticated Remote Code Execution (RCE) vulnerability exists in Horilla 1.3.0 due to the unsafe use of Python’s eval() function on a user-controlled query parameter in the project_bulk_archive view. T...

17. CVE-2025-47789 Horilla Open Redirect Vulnerability in Login

    Published 2025-05-15

    Medium·CVSS 6.1 EPSS 0.23%

    Horilla is a free and open source Human Resource Management System (HRMS). In versions up to and including 1.3, an attacker can craft a Horilla URL that refers to an external domain. Upon clicking and logging in, the user is redirected to an external domain. This allows the redir...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.