EUVD-2026-29116
GHSA-6fpq-hhv8-hc9f
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
4DescriptionNVD
HireFlow v1.2 is vulnerable to Incorrect Access Control. The application does not enforce object-level authorization on the /candidate/<id> and /interview/<id> endpoints. The route handlers retrieve records by the user-supplied ID without verifying that the requesting user is the owner or has an authorized role. Any authenticated user can access any other user's candidate profiles and interview notes by iterating the integer ID in the URL path, constituting a horizontal privilege escalation and full data breach of all records in the system.
AnalysisAI
Broken object-level authorization in HireFlow v1.2 exposes all candidate profiles and interview notes to any authenticated user via direct object reference. Attackers with valid low-privilege credentials can enumerate integer IDs in /candidate/<id> and /interview/<id> endpoints to access the entire database, enabling full horizontal privilege escalation and complete data breach. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Implement network-level access controls restricting /candidate/ and /interview/ endpoints to authenticated users with documented business need; enable detailed logging of all requests to these endpoints. Within 7 days: Contact HireFlow vendor for emergency security update or request timeline for patched version; conduct forensic audit of access logs for evidence of exploitation. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today