Lucene search

Leave Management System Security Vulnerabilities

cve

CVE-2023-45540

An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted script to the comment field of the List of Leave requests page.

6.5CVSS

6.7AI Score

0.001EPSS

2023-10-16 10:15 PM

cve

CVE-2023-48205

Jorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated with password reset emails.

5.3CVSS

5.3AI Score

0.001EPSS

2023-12-07 07:15 AM