Executive Summary

This vulnerability exists in Horilla HRMS versions prior to 1.4.0, where file upload validation is only done on the client side and not enforced on the server. An attacker can bypass client-side checks to upload a malicious executable HTML file. When an administrator or privileged user views this file, the embedded script executes in their context and sends their session cookies or credentials to the attacker, allowing the attacker to impersonate the admin.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to an attacker stealing administrator credentials by executing malicious scripts in the admin's browser context. This allows the attacker to impersonate the admin, potentially gaining unauthorized access to sensitive HR data and administrative functions within the Horilla system.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Horilla to version 1.4.0 or later, as this version includes a patch that enforces server-side validation of uploaded files to prevent the vulnerability.

Useful 0 Not Useful 0