[HIGH] NotrinosERP: Authenticated arbitrary file upload leads to remote code execution via HRM employee "Documents" (doc_file)

PKSA-6c2y-dycw-7c38 GHSA-qv4m-m73m-8hj7

Affected package: notrinos/notrinos-erp

Affected version: <=1.0.0

Reported by:
GitHub