7 matches found
CVE-2022-27110
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint...
CVE-2022-27110
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint...
CVE-2022-27110
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint...
Design/Logic Flaw
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint...
CVE-2022-27110
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint...
CVE-2022-27110: URL Redirection to Untrusted Site
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint...
PT-2022-18228
Name of the Vulnerable Software and Affected Versions OrangeHRM version 4.10 Description The issue concerns a Host header injection redirect via the "viewPersonalDetails" endpoint. This allows for potential redirection attacks. Recommendations For OrangeHRM version 4.10, as a temporary workaround...