PT-2022-20392
CVE-2022-30931
·
تاريخ النشر
2022-06-14
·
تاريخ التحديث
2022-06-23
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Employee Leaves Management System (ELMS) version 2.1
Description
The issue is related to Cross Site Request Forgery (CSRF) via the "/myprofile.php" API endpoint. This means an attacker could potentially trick a user into performing unintended actions on the system.
Recommendations
For Employee Leaves Management System (ELMS) version 2.1, consider implementing proper CSRF token validation to prevent unauthorized requests to the "/myprofile.php" endpoint. As a temporary workaround, restrict access to the "/myprofile.php" endpoint until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾