4 matches found
CVE-2022-0935
Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97...
8.8CVSS7.1AI score0.01319EPSS
SaveExploits1References1
CVE-2022-0935
creationtimestamp| type| source ---|---|--- 2022-04-07 22:36:39+00:00| seen| https://t.me/cibsecurity/40314...
8.8CVSS8.1AI score0.01319EPSS
SaveExploits1References1
CVE-2022-0935
CVE-2022-0935 affects livehelperchat/livehelperchat prior to 3.97 and is caused by Host Header injection in the password reset flow. Multiple sources (NVD, Red Hat, OSV, CNVD, PT-Security, CNVD) describe an attacker abusing header handling to forge or manipulate password reset tokens, potentially...
8.8CVSS9AI score0.01319EPSS
SaveExploits1References2Affected Software1
20