← Back to CVE List

CVE-2021-28399

Published: 2021-04-26T14:15Z
Last Modified: 2024-11-21T05:59Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt