Hongjing e-HR 2020 - SQLi (CVE-2023-6655)
Description
A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /w_selfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument parentid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-247358 is the identifier assigned to this vulnerability.
psychologyCrowdSec Analysis
CVE-2023-6655 is a vulnerability impacting the Hongjing e-HR platform that allows remote attackers to perform SQL injection on the login interface.
CrowdSec has been tracking this vulnerability and its exploits since 27th of November 2024.
CrowdSec network observations suggest that most exploitation of CVE-2023-6655 involves focused reconnaissance to identify viable targets. Attackers typically tailor their campaigns based on system exposure and configuration. It is unlikely that a given attack is accidental. Data from the CrowdSec community also indicates a gradual decrease in attacks targeting CVE-2023-6655. While still present in the wild, exploitation levels have dropped noticeably week-over-week. This may signal that the vulnerability is becoming less relevant or that defenses are improving fast enough for attackers to lose interest.
Attack patterns are characterized by accesses to URLs starting with /w_selfservice/oauthservlet/%2e./.%2e/.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2023-12-10 |
| Rule Released | 2024-11-27 |
| CrowdSec First Seen | 2024-11-28 |