CVE-2023-54399 | Hongjing e-HR up to 8.1 /servlet/codesettree Categories sql injection

September 18, 2026 Yanac

A vulnerability was found in Hongjing e-HR up to 8.1 and classified as critical. This affects an unknown function of the file /servlet/codesettree. The manipulation of the argument Categories results in sql injection.

This vulnerability is reported as CVE-2023-54399. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More