Sourcecodester · Sourcecodester Online Employee Leave Management System · CVE-2022-3121
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Online Employee Leave Management System version 1.0
**Description**
A vulnerability was found in the system, affecting an unknown functionality of the file /admin/addemployee.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely.
**Recommendations**
For SourceCodester Online Employee Leave Management System version 1.0, consider restricting access to the /admin/addemployee.php file until a patch is available. As a temporary workaround, avoid using the affected functionality in the /admin/addemployee.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.