Staff Appraisal System vulnerabilities
We track 1 vulnerability in Staff Appraisal System products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 23, 2024.
1vulnerabilities
0critical
1high
0exploited
8.0average CVSS score
Latest Staff Appraisal System vulnerabilities
- 8.0 High severity
staff_appraisal_system: Weak Password Recovery Mechanism for Forgotten Password
A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This will allow attackers to arbitrarily reset other users' passwords and compromi