PYSEC-2021-18

2021-04-0714:15:00

Google

osv.dev

0.001 Low

EPSS

Percentile

31.0%

JSON

CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.

CPENameOperatorVersion
indicoeq2.2.3
indicoeq2.1.4
indicoeq2.0
indicoeq1.9.11.dev12
indicoeq2.3.3
indicoeq1.2.2
indicoeq2.2.4
indicoeq2.3
indicoeq0.98.0
indicoeq2.0.1

Name	Operator	Version
indico	eq	2.2.3
indico	eq	2.1.4
indico	eq	2.0
indico	eq	1.9.11.dev12
indico	eq	2.3.3
indico	eq	1.2.2
indico	eq	2.2.4
indico	eq	2.3
indico	eq	0.98.0
indico	eq	2.0.1

Rows per page:

1-10 of 671

References

github.com/advisories/GHSA-wgpj-7c2j-vfjm

github.com/indico/indico/releases/tag/v2.3.4

www.shorebreaksecurity.com/blog/

0.001 Low

EPSS

Percentile

31.0%

JSON

Related for OSV:PYSEC-2021-18