5 matches found
CVE-2024-29643
An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component...
9.1CVSS7.1AI score0.00574EPSS
SaveExploits1References1
CVE-2024-29643
An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component...
9.1CVSS0.00574EPSS
SaveExploits1References1
CVE-2024-29643
The croogo v.3.0.2 CMS is vulnerable to a Host header injection attack within the feed.rss component. The root cause is that the component takes the content of the -H argument in a request and passes it through to the element in a response without proper filtering. An attacker can leverage this ...
7.4AI score0.00574EPSS
SaveExploits1References1Affected Software1
20