CVE-2021-34244 | BDVDB-2026-155839 Detail

Description#

A cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create new admin accounts or change users' passwords.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/xoffense/POC/blob/main/Account%20takeover%20using%20CSRF%20in%20ICE%20Hrm%20Version%2029.0.0.OS.md

Exploit#

No public exploit known

History#

Version 12021-06-22Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.