Vulners
Lucene search
4 matches found
Heimdall - Host Header Injection & Open Redirect
LinuxServer.io Heimdall 2.6.3-ls307 contains a host header injection caused by improper validation of user-supplied HTTP headers X-Forwarded-Host and Referer, letting unauthenticated remote attackers perform host header injection and open redirect attacks, exploit requires no special privileges...
9.8CVSS5.9AI score0.03179EPSS
Exploits1References2
CVE-2025-54597
LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter...
7.2CVSS5.5AI score0.01126EPSS
Exploits0References1
CVE-2025-54597
LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter...
6.1CVSS5.4AI score
Exploits0References2
CVE-2025-54597
LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter...
7.2CVSS0.01126EPSS
Exploits0References2
20