Lucene search

K
osvGoogleOSV:CVE-2022-23079
HistoryJun 22, 2022 - 1:15 p.m.

CVE-2022-23079

2022-06-2213:15:08
Google
osv.dev
3
cve-2022-23079
motor-admin
password reset
host header injection
fake email

AI Score

7.3

Confidence

High

EPSS

0

Percentile

12.8%

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.

AI Score

7.3

Confidence

High

EPSS

0

Percentile

12.8%

Related for OSV:CVE-2022-23079