Security Advisory
CVE-2022-27108
4.3
MEDIUM
Vulnerability Description
OrangeHRM 4.10 is vulnerable to Insecure Direct Object Reference (IDOR) via the end point symfony/web/index.php/time/createTimesheet`. Any user can create a timesheet in another user's account.
Published Date
April 6, 2022
Official Source
NIST NVD Advisory