Jorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated with password reset emails.

Published Dec 7, 2023 · Updated Aug 2, 2024 · Assigned by mitre