Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-35x7-r658-wx7f

Опубликовано: 26 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 6.1

Описание

A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker to inject harmful payloads that manipulate server-side behavior.

This vulnerability only affects the endpoints /Authentication/ExternalLogin, /Authentication/AuthorizationCodeCallback and /Authentication/Logout of the WebClient and WebScheduler web apps.

A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker to inject harmful payloads that manipulate server-side behavior.

This vulnerability only affects the endpoints /Authentication/ExternalLogin, /Authentication/AuthorizationCodeCallback and /Authentication/Logout of the WebClient and WebScheduler web apps.

EPSS

Процентиль: 11%
0.00207
Низкий

5.3 Medium

CVSS4

6.1 Medium

CVSS3

Дефекты

CWE-644

Связанные уязвимости

CVSS3: 6.1
nvd
7 месяцев назад

A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker to inject harmful payloads that manipulate server-side behavior. This vulnerability only affects the endpoints /Authentication/ExternalLogin, /Authentication/AuthorizationCodeCallback and /Authentication/Logout of the WebClient and WebScheduler web apps.

EPSS

Процентиль: 11%
0.00207
Низкий

5.3 Medium

CVSS4

6.1 Medium

CVSS3

Дефекты

CWE-644