LinkStack Code Issues Vulnerabilities

LinkStack is a unique platform from LinkStack Open Source that provides an efficient solution for managing and sharing links online. A code issue vulnerability exists in versions prior to LinkStack v4.2.9 that stems from an insufficient setting of the session expiration time after a password chan...

Password Reset link hijacking via Host Header Poisoning

Description LinkStack uses the Host header when sending out password reset links. This allows an attacker to insert a malicious host header, leading to password reset link / token leakage. Tested on a default Docker Compose installation of LinkStack https://github.com/LinkStackOrg/linkstack-docke...