What’s Vulnerable › Vulnerabilities

CVE-2019-15129

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-08-18 · updated 2026-06-17
• Weakness: CWE-306

Description

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file name, such as in a recruitment_online/upload/user/[user_id]/photo/[file_name] URI.

Affected products

• Humanica Humatrix 7: 1.0.0.203, 1.0.0.681

References

• https://gist.github.com/izadgot/38a7dd553f8024ed3154134dae0414fd
• https://gist.github.com/izadgot/38a7dd553f8024ed3154134dae0414fd

Get alerted when CVE-2019-15129 or the next vulnerability affects your stack