Lucene search

CVE-2018-6889

🗓️ 12 Feb 2018 03:00:29Reported by mitreType

An issue in Typesetter 5.1 allows Host header injection leading to cache poisoning, password reset attacks, & user re-direction

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
NVD	CVE-2018-6889	12 Feb 201803:29	–	nvd
OSV	CVE-2018-6889	12 Feb 201803:29	–	osv
0day.today	TypeSetter CMS 5.1 - Host Header Injection Vulnerability	13 Feb 201800:00	–	zdt
Packet Storm	TypeSetter CMS 5.1 Host Header Injection	13 Feb 201800:00	–	packetstorm
Cvelist	CVE-2018-6889	12 Feb 201803:00	–	cvelist
Prion	Design/Logic Flaw	12 Feb 201803:29	–	prion

Nvd

Node

typesettercms typesetterMatch5.1

Source	Link
exploit-db	www.exploit-db.com/exploits/44028/
securitywarrior9	www.securitywarrior9.blogspot.in/2018/02/host-header-injection-type-setter-cms-51.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Feb 2018 03:29Current

8.9High risk

Vulners AI Score8.9

CVSS26.5

CVSS38.8

EPSS0.02916

CWE-94