Vulnerability · Published Sep 5, 2022 · Assigned by VulDB
CVE-2022-3121SourceCodester Online Employee Leave Management System addemployee.php cross-site request forgery
Medium 4.3
In plain English
A medium-severity cross-site request forgery in Online Employee Leave Management System from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Official description
A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addemployee.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The identifier VDB-207853 was assigned to this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Online Employee Leave Management System | 1.0 |
Weakness: CWE-352 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
References
- https://vuldb.com/?id.207853 x_refsource_MISC