CVE-2025-61136

The CVE-2025-61136 entry describes a Host Header Injection vulnerability in the password reset component of axewater sharewarez v2.4.3. The underlying issue is an unfixed SERVER_NAME causing Flask url_for(_external=True) to generate reset links that can be manipulated via the Host header, enablin...