Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j6pg-h597-gcx9

Опубликовано: 26 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts.

A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts.

EPSS

Процентиль: 31%
0.00118
Низкий

8.8 High

CVSS3

Дефекты

CWE-640

Связанные уязвимости

CVSS3: 8.8
nvd
больше 1 года назад

A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts.

EPSS

Процентиль: 31%
0.00118
Низкий

8.8 High

CVSS3

Дефекты

CWE-640