CVE-2022-27110

OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint.
References
Link Resource
https://github.com/orangehrm/orangehrm/issues/1175 Exploit Issue Tracking
Configurations

Configuration 1

cpe:2.3:a:orangehrm:orangehrm:4.10:*:*:*:*:*:*:*

Information

Published : 2022-04-06 03:15

Updated : 2022-04-13 06:27


NVD link : CVE-2022-27110

Mitre link : CVE-2022-27110

Products Affected
No products.
CWE
CWE-601

URL Redirection to Untrusted Site ('Open Redirect')