Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cwjv-mxfr-rrv9

Опубликовано: 26 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link.

A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link.

EPSS

Процентиль: 36%
0.00153
Низкий

8.8 High

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 8.8
nvd
больше 1 года назад

A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link.

EPSS

Процентиль: 36%
0.00153
Низкий

8.8 High

CVSS3

Дефекты

CWE-601