aEnrich Technology a+HRD Server-Side Request Forgery Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in a+HRD versions 7.5 and earlier, developed by aEnrich Technology. This vulnerability allows unauthenticated remote attackers to probe internal networks, potentially leading to unauthorized access or information disclosure.

Impact

Exploitation of this vulnerability could allow remote attackers to access and probe internal network resources, potentially leading to further exploitation or information disclosure.

Remediation

Users are advised to upgrade to a+HRD version 6.8 or later and install the latest patches. For assistance, contact aEnrich customer service.