PT-2026-53207 · Unknown · Codeastro Human Resource Management System

Ashikmd7 · Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-13537

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CodeAstro Human Resource Management System version 1.0

Description An issue exists that allows for cross-site request forgery (CSRF), a type of attack that forces an authenticated user to execute unwanted actions on a web application. This flaw can be exploited remotely through an unknown function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Missing Authorization

Weakness Enumeration

CWE-352

CWE-862

Related Identifiers

CVE-2026-13537

Affected Products

Codeastro Human Resource Management System

References · 10

• 🔥 https://github.com/ashikmd0507/CVE/tree/main/CSRF%20in%20Department%20Deletion%20Endpoint · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-13537 · Security Note
• https://vuldb.com/submit/842084 · Note
• https://vuldb.com/vuln/374545 · Note
• https://twitter.com/CVEnew/status/2071534127745003589 · Twitter Post
• https://twitter.com/infoflowcloud/status/2071534540053475492 · Twitter Post
• https://codeastro.com · Note
• https://twitter.com/VulmonFeeds/status/2071489907919396952 · Twitter Post
• https://vuldb.com/vuln/374545/cti · Note
• https://vuldb.com/cve/CVE-2026-13537 · Note