Orangehrm: >> Orangehrm >> 4.7 Security Vulnerabilities
OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function.
CVSS Score
5.3
EPSS Score
0.007
Published
2021-04-26