3691 matches found
UBUNTU-CVE-2023-29406
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value...
CVE-2023-29406
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value...
CVE-2023-29406
CVE-2023-29406 affects Go's HTTP/1 client: the Host header is not fully validated, enabling a malicious Host header to inject additional headers or entire requests. Public details in connected advisories show affected Go package versions and patch guidance, e.g., golang packages for versions <...
CVE-2023-29406 Insufficient sanitization of Host header in net/http
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value...
CVE-2023-29406 Insufficient sanitization of Host header in net/http
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value...
CVE-2023-29406
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value...
PT-2023-9031
Name of the Vulnerable Software and Affected Versions Golang affected versions not specified Description The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With the fix, the HTTP/1 client n...
ApPHP MicroCMS 1.0.1 Host Header Injection
==================================================================================================================================== | Title : ApPHP MicroCMS v1.0.1 Host header attack Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro | | Vendor :...
CVE-2023-28016
Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain...
CVE-2023-28016
Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain...
Design/Logic Flaw
Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain...
CVE-2023-28016 HCL BigFix OSD Bare Metal Server is affected by a host header injection vulnerability
Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain...
CVE-2023-28016
CVE-2023-28016 affects HCL BigFix OSD Bare Metal Server versions 311.12 or lower, via a Host Header Injection vulnerability that enables a redirect to an attacker‑controlled domain. Root cause is improper handling of host header input leading to external redirects. Impact is a user redirection to...
CVE-2023-28016 HCL BigFix OSD Bare Metal Server is affected by a host header injection vulnerability
Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain...
HCL Technologies BigFix OSD 注入漏洞
HCL Technologies BigFix OSD is part of a lifecycle management software from HCL Technologies, Inc. for operating system deployment. A security vulnerability exists in HCL Technologies BigFix OSD Bare Metal Server version 311.12 and prior versions, which stems from the inclusion of a host header...
PT-2023-21482 · Hcl · Hcl Bigfix Osd Bare Metal Server
Name of the Vulnerable Software and Affected Versions: HCL BigFix OSD Bare Metal Server versions 311.12 or lower Description: The issue allows an attacker to supply invalid input, causing the server to perform a redirect to an attacker-controlled domain. This is achieved through a Host Header...
Beware of Ghost Sites: Silent Threat Lurking in Your Salesforce Communities
Improperly deactivated and abandoned Salesforce Sites and Communities aka Experience Cloud could pose severe risks to organizations, leading to unauthorized access to sensitive data. Data security firm Varonis dubbed the abandoned, unprotected, and unmonitored resources "ghost sites." "When these...
Host Header Injection
lavalite/cms is vulnerable to host header injection.The vulnerability exists due to a lack of sanitization in the http header...
