PT-2018-17804

Name of the Vulnerable Software and Affected Versions Typesetter version 5.1 Description An issue was discovered in Typesetter, which suffers from a Host header injection vulnerability. This allows a malicious user to poison the web cache, perform advanced password reset attacks, or trigger...

CVE-2018-6889: Improper Control of Generation of Code

An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability, Using this attack, a malicious user can poison the web cache or perform advanced password reset attacks or even trigger arbitrary user re-direction...