ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php.

Published Feb 18, 2020 · Updated Aug 4, 2024 · Assigned by mitre