CVE-2026-63431 | Horilla up to 1.5.0-85 Payroll component_views.py emp_id/allowance_id/deduction_id improper authorization

A vulnerability has been found in Horilla up to 1.5.0-85 and classified as problematic. The impacted element is the function allowances_deductions_tab/view_single_allowance/view_single_deduction of the file payroll/views/component_views.py of the component Payroll. The manipulation of the argument emp_id/allowance_id/deduction_id leads to improper authorization.

This vulnerability is listed as CVE-2026-63431. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More