CVE-2021-25839: Minthcm

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing.

Affected products

• Minthcm Minthcm: version 3.0.8 only

Published 2021-04-26. Last modified 2026-06-17.