VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 7, 2022· Updated Jun 17, 2026

CVE-2022-26675

CVE-2022-26675

Description

aEnrich a+HRD has inadequate filtering for special characters in URLs. An unauthenticated remote attacker can bypass authentication and perform path traversal attacks to access arbitrary files under website root directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • aEnrich/a+HRDllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 6.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.