CVE-2007-5931: Orangehrm

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The reDirect function in lib/controllers/RepViewController.php in OrangeHRM before 2.2.2 does not verify the privileges of a user, which allows remote attackers to obtain access to data via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Orangehrm Orangehrm: up to and including 2.2.1

Published 2007-11-10. Last modified 2026-06-16.