CVE-2021-34244

2021-06-2213:21:39

mitre

www.cve.org

ice hrm

csrf

vulnerability

admin accounts

user passwords

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

43.2%

JSON

A cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create new admin accounts or change users’ passwords.

References

github.com/xoffense/POC/blob/main/Account%20takeover%20using%20CSRF%20in%20ICE%20Hrm%20Version%2029.0.0.OS.md