2022-04-06 14:43:52
mitre
PUBLISHED
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint.