Jorani

Jorani is a narrowly scoped open-source leave and absence management system that, despite limited product breadth, occupies a prominent position in the human-resources software landscape and sits within many organizations' internal web-application portfolios. Vulnerabilities affecting this vendor skew toward serious outcomes and frequently acquire public exploit code; the recurring exposure centers on input-handling and access-control weaknesses including SQL injection, cross-site scripting, path traversal, CSRF, and broader injection flaws characteristic of web applications processing user-submitted data and state. Defenders should treat Jorani instances as requiring prompt patching when disclosures emerge, particularly where they are internet-reachable or process sensitive employment data; current severity and exploit-availability figures are shown alongside this summary.