medium6.5
CVE-2020-9271
ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php.
Impact
ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Icehrm | Icehrm | Version 26.2.0.os |