Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cm5v-3gc5-6w7v

Опубликовано: 14 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 7.5

Описание

Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct authentication.

Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct authentication.

EPSS

Процентиль: 22%
0.0007
Низкий

8.5 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-640

Связанные уязвимости

CVSS3: 7.5
nvd
25 дней назад

Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct authentication.

EPSS

Процентиль: 22%
0.0007
Низкий

8.5 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-640