medium5.4
CVE-2022-27110
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint.
Impact
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Orangehrm | Orangehrm | Version 4.10 |