CVE-2025-47424

creationtimestamp| type| source ---|---|--- 2025-05-09 23:25:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15856 2025-05-10 02:31:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lorvkxxvrx2j 2025-05-10 03:04:57+00:00| seen| https://t.me/cvedetector/24986...

CVE-2025-47424

Retool self-hosted before 3.196.0 allows Host header injection. When the BASEDOMAIN environment variable is not set, the HTTP host header can be manipulated...