10 matches found
EUVD-2021-0101
Malware in sbrugna...
CVE-2021-30185
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
CVE-2021-30185
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
PYSEC-2021-18
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
PYSEC-2021-18
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
Default credentials
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
CVE-2021-30185
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
CVE-2021-30185
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
PT-2021-18659
Name of the Vulnerable Software and Affected Versions CERN Indico versions prior to 2.3.4 Description The issue arises from Indico's URL generation logic, which can be exploited by an attacker to send a password reset link with a valid token to an attacker-controlled domain. This is achieved by...
