PYSEC-2021-18

CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...

CVE-2021-30185

CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...

CVE-2021-30185

CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...

CVE-2021-30185

CVE-2021-30185 affects CERN Indico prior to 2.3.4. The vulnerability resides in Indico’s URL generation for password resets, where an attacker-supplied Host header can steer the reset link to an attacker-controlled domain. If a user clicks such a link, the attacker could obtain the password reset...

Adrian indico 安全漏洞

Adrian indico is an application of Adrian open source . A hierarchical content management system. A security vulnerability exists in versions prior to Adrian indico 2.3.4, which stems from the ability to use an attacker-supplied host header in a password reset link...

GHSA-67CX-RHHQ-MFHQ High severity vulnerability that affects indico

Local file disclosure through LaTeX injection Impact An external audit of the Indico codebase has discovered a vulnerability in Indico's LaTeX sanitization code, which could have malicious users to run unsafe LaTeX commands on the server. Such commands allowed for example to read local files e.g...

High severity vulnerability that affects indico

Local file disclosure through LaTeX injection Impact An external audit of the Indico codebase has discovered a vulnerability in Indico's LaTeX sanitization code, which could have malicious users to run unsafe LaTeX commands on the server. Such commands allowed for example to read local files e.g...