authsvc in Caldera before 2.6.5 allows authentication bypass for REST API requests via a forged "localhost" string in the HTTP Host header...
5.3CVSS7.2AI score0.0144EPSS
SaveExploits0References1
Cvelist•added 2022/01/12 7:6 p.m.•33 views
CVE-2021-42558
An issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS vulnerabilities that may be exploited by authenticated and unauthenticated attackers...
