CVE-2021-34244

2021-06-2214:15:08

Google

osv.dev

cve-2021-34244

cross site request forgery

ice hrm 29.0.0.os

user account management

security vulnerability

admin accounts

password change

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

43.2%

JSON

A cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create new admin accounts or change users’ passwords.

References

github.com/xoffense/POC/blob/main/Account%20takeover%20using%20CSRF%20in%20ICE%20Hrm%20Version%2029.0.0.OS.md