CVE-2023-6655 | Hongjing e-HR 2020 Login Interface loadhistroyorgtree parentid sql injection

A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /w_selfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument parentid leads to sql injection.

This vulnerability is handled as CVE-2023-6655. The attack may be launched remotely. Furthermore, there is an exploit available.