CVE-2026-39345

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-39345

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-39345.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-39345

Aliases

GHSA-xq24-qv66-9v3m

Published

2026-04-07T18:17:35.223Z

Modified

2026-07-08T08:13:10.176136Z

Severity

4.6 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N CVSS Calculator

Summary

OrangeHRM Affected by Arbitrary File Read via Path Traversal in Email Template Loader

Details

OrangeHRM is a comprehensive human resource management (HRM) system. From 5.0 to 5.8, OrangeHRM Open Source fails to restrict email template file resolution to the intended plugins directory, allowing an authenticated actor who can influence the template path to read arbitrary local files. This vulnerability is fixed in 5.8.1.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39345.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-22"
    ]
}

References

Affected packages

Git / github.com/orangehrm/orangehrm

Affected ranges

Type

GIT

Repo

https://github.com/orangehrm/orangehrm

Events

Introduced

7bd109532b98fbf2896627b86099cc82afe215fb

Fixed

d3a50a814c3098fde81b99abfaacd8cb5a787429

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "cpe": "cpe:2.3:a:orangehrm:orangehrm:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.0"
        },
        {
            "fixed": "5.8.1"
        }
    ]
}

Affected versions

v.*

v.5.0

v5.*

v5.1

v5.2

v5.3

v5.4

v5.5

v5.6

v5.6.1

v5.7

v5.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-39345.json"