CVE-2019-25064

CVE-2019-25064 affects CoreHR Core Portal up to version 27.0.7. The issue is a cross-site request forgery (CSRF) in an unknown function that allows remote triggering of actions without proper CSRF validation. Several sources confirm the vulnerability and indicate that upgrading to version 27.0.8 ...