high8.8
CVE-2020-9270
ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php.
Impact
ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Icehrm | Icehrm | Version 26.2.0.os |