Lucene search

K
osvGoogleOSV:CVE-2017-9303
HistoryMay 29, 2017 - 10:29 p.m.

CVE-2017-9303

2017-05-2922:29:00
Google
osv.dev
12

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

43.2%

Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host.

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

43.2%