CVE-2025-43932

The JobCenter application (versions through 7e7b0b2 ) is vulnerable to account takeover via its password reset feature. The root cause is an unconfigured SERVER_NAME , which forces the password reset process to rely on the Host HTTP header . To remediate this, administrators should configure the ...