VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 9, 2022· Updated Apr 15, 2025

CoreHR Core Portal cross-site request forgery

CVE-2019-25064

Description

A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. Upgrading to version 27.0.8 is able to address this issue. It is recommended to upgrade the affected component.

Affected products

2
  • CoreHR/Core Portalllm-create2 versions
    <=27.0.7+ 1 more
    • (no CPE)range: <=27.0.7
    • (no CPE)range: 27.0.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.