The pentest professionals at usd HeroLab identified multiple vulnerabilities in the applications OrangeHRM and memos during web application pentests.
The vulnerabilities were reported to the vendors as part of the Responsible Disclosure Policy. Detailed information on the advisories can be found here:
OrangeHRM
During the examination of the OrangeHRM software, two vulnerabilities were identified. The first vulnerability allows a user with low privileges to take over any account, including the administrator's, using the password reset function. The second vulnerability allows a user with administrative privileges to execute arbitrary system commands.
| ID | Product | Vulnerability Type |
|---|---|---|
| usd-2025-0046 | OrangeHRM | Weak Password Recovery Mechanism for Forgotten Password (CWE-640) |
| usd-2025-0047 | OrangeHRM | Improper Neutralization of Special Elements used in an OS Command (CWE-78) |
memos
Additional vulnerabilities were discovered in the software memos. These consist of a series of inadequate access controls. In addition, authenticated users can overwrite any files and thus bring the system to a complete standstill.
| ID | Product | Vulnerability Type |
|---|---|---|
| usd-2025-0056 | memos | Relative Path Traversal (CWE-23) |
| usd-2025-0057 | memos | Missing Authorization (CWE-862) |
| usd-2025-0058 | memos | Missing Authorization (CWE-862) |
| usd-2025-0059 | memos | Missing Authorization (CWE-862) |
| usd-2025-0060 | memos | Missing Authorization (CWE-862) |
| usd-2025-0061 | memos | Missing Authorization (CWE-862) |
About usd HeroLab Security Advisories
In order to protect businesses against hackers and criminals, we must ensure that our skills and knowledge are up to date at all times. Therefore, security research is just as important to our work as is building up a security community to promote an exchange of knowledge. After all, more security can only be achieved if many people take on the task.
We analyze attack scenarios, which are changing constantly, and publish a series of Security Advisories on current vulnerabilities and security issues – always in line with our Responsible Disclosure Policy.
Always in the name of our mission: “more security.”
