CVE-2022-26588

2022-04-0821:15:08

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.4%

JSON

A Cross-Site Request Forgery (CSRF) in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeover via the app/service.php URI.

CPENameOperatorVersion
icehrmeq24.0.0.OS
icehrmeq28.1.1.OS
icehrmeq27.0.2.OS
icehrmeq16.0.OS
icehrmeq21.1.0.OS
icehrmeq30.0.0.OS
icehrmeq20.0.OS
icehrmeq28.2.0.OS
icehrmeq14.0.OS
icehrmeq31.0.0.OS

Name	Operator	Version
icehrm	eq	24.0.0.OS
icehrm	eq	28.1.1.OS
icehrm	eq	27.0.2.OS
icehrm	eq	16.0.OS
icehrm	eq	21.1.0.OS
icehrm	eq	30.0.0.OS
icehrm	eq	20.0.OS
icehrm	eq	28.2.0.OS
icehrm	eq	14.0.OS
icehrm	eq	31.0.0.OS