Unrated severityNVD Advisory· Published Jun 29, 2026· Updated Jun 29, 2026
CodeAstro Human Resource Management System cross-site request forgery
CVE-2026-13537
Description
A vulnerability was found in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely. The exploit has been made public and could be used.
Patches
Vulnerability mechanics
References
6- github.com/ashikmd0507/CVE/tree/main/CSRF%20in%20Department%20Deletion%20Endpointmitreexploit
- vuldb.com/cve/CVE-2026-13537mitrethird-party-advisory
- vuldb.com/submit/842084mitrethird-party-advisory
- codeastro.commitreproduct
- vuldb.com/vuln/374545mitrevdb-entry
- vuldb.com/vuln/374545/ctimitresignaturepermissions-required
News mentions
0No linked articles in our index yet.