Indico Security Vulnerabilities

CVE-2023-37901

Indico is an open source a general-purpose, web based event management tool. There is a Cross-Site-Scripting vulnerability in confirmation prompts commonly used when deleting content from Indico. Exploitation requires someone with at least submission privileges (such as a speaker) and then someone....

CVE-2021-30185

CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset...