Vendor · first seen 15 Oct
HighLikelyOpenNobody has it
On SeamlessHR · Theirs to fix · attribution high
It counts against their grade, not your queue. Ask them for a fix and we'll recheck from outside when they say it's done.
One problem in one place, found by vendor.
1 source · 1 place
Vendor
Theirs to fix · attribution high
What closes it
Nobody can mark it fixed by hand. A person submits the fix; a scan or a retest decides it.
Out of the queue, but scored the same way
Proof first, then exploitation in the wild, a public exploit, EPSS and severity, adjusted for exposure and how much the asset matters
Priority
44 / 100
What each source saw
As each source gives it · secrets, keys and card numbers stay masked
SeamlessHR · from outside, nightly
Their pageadmin.seamlesshr.com
admin.seamlesshr.com/login accepts a username and password and opens the dashboard with no second step offered.
What happened, and what was said
1 event · 0 comments · oldest first