Skip to content
Sign in Sign up
JA EN FR
SecPulse
Unrated

OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function.

CVE-2021-28399 First seen on SecPulse
Original description The description as published by the source.

OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details