Lucene search

Minthcm Security Vulnerabilities

cve

CVE-2021-25838

The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting (XSS) payload in file-upload.

6.1CVSS

5.9AI Score

0.001EPSS

2021-04-26 02:15 PM

cve

CVE-2021-25839

A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing.

9.8CVSS

9.3AI Score

0.004EPSS

2021-04-26 02:15 PM