Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2024/02/29 3:33 a.m.15 views

FullStackHero's WebAPI Boilerplate host header injection vulnerability

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

8.1CVSS7.4AI score0.00149EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2024/02/29 1:44 a.m.9 views

CVE-2024-26470

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

8.1CVSS6.8AI score0.00149EPSS
Exploits1References3
Prion
Prion
added 2024/02/29 1:44 a.m.15 views

Design/Logic Flaw

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

7.7AI score0.00149EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/02/27 12:0 a.m.8 views

CVE-2024-26470

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

7.4AI score0.00149EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/02/27 12:0 a.m.14 views

CVE-2024-26470

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

7AI score0.00149EPSS
Exploits1References3
Rows per page
Query Builder