Summary

The discovery of CVE-2020-29437 during a routine security audit in OrangeHRM highlighted a critical flaw: authenticated users, even those with minimal privileges, could exploit a SQL injection vulnerability within the "Buzz" module.

Description