debashish-choudhury/staff-appraisal-system

debashish-choudhury/staff-appraisal-system

GitHubGitHub
GitHubgithub.com
Releases0
Stars3
An online portal for college where institute can perform the appraisal and evaluation process.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-42915↗
8 HIGH—

A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This will allow attackers to arbitrarily reset other users' passwords and compromise their accounts.