TVN ID	TVN-202501005
CVE ID	CVE-2025-0584
CVSS	5.3 (Medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products	a+HRD version 7.5 and earlier
Description	The a+HRD from aEnrich Technology has a Server-side Request Forgery, allowing unauthenticated remote attackers to exploit this vulnerability to probe internal network.
Solution	Please refer to the aEnrich advisory to upgrade to version 6.8 or later and install the latest patches, or contact aEnrich customer service for assistance.
Credit	Linwz (DEVCORE)
Public Date	2025-01-20