Количество 2
Количество 2
CVE-2025-47424
около 1 года назад
Retool (self-hosted) before 3.196.0 allows Host header injection. When the BASE_DOMAIN environment variable is not set, the HTTP host header can be manipulated.
CVSS3: 7.1
EPSS: Низкий
GHSA-xw45-9vvw-6qg3
около 1 года назад
Retool (self-hosted) before 3.196.0 allows Host header injection. When the BASE_DOMAIN environment variable is not set, the HTTP host header can be manipulated.
CVSS3: 7.1
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-47424 Retool (self-hosted) before 3.196.0 allows Host header injection. When the BASE_DOMAIN environment variable is not set, the HTTP host header can be manipulated. | CVSS3: 7.1 | 0% Низкий | около 1 года назад |
| GHSA-xw45-9vvw-6qg3 Retool (self-hosted) before 3.196.0 allows Host header injection. When the BASE_DOMAIN environment variable is not set, the HTTP host header can be manipulated. | CVSS3: 7.1 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу
20