Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2024/02/29 3:33 a.m.•29 views

FullStackHero's WebAPI Boilerplate host header injection vulnerability

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

8.1CVSS7.4AI score0.0104EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2024/02/29 1:44 a.m.•21 views

CVE-2024-26470

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

8.1CVSS6.8AI score0.0104EPSS
SaveExploits1References3
Prion
Prion
•added 2024/02/29 1:44 a.m.•29 views

Design/Logic Flaw

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

7.7AI score0.0104EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/02/27 12:00 a.m.•11 views

CVE-2024-26470

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

7.4AI score0.0104EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/02/27 12:00 a.m.•34 views

CVE-2024-26470

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

7AI score0.0104EPSS
SaveExploits1References3
Rows per page
Query Builder