4 matches found
Heimdall - Host Header Injection & Open Redirect
LinuxServer.io Heimdall 2.6.3-ls307 contains a host header injection caused by improper validation of user-supplied HTTP headers X-Forwarded-Host and Referer, letting unauthenticated remote attackers perform host header injection and open redirect attacks, exploit requires no special privileges...
9.8CVSS5.9AI score0.02779EPSS
SaveExploits1References2
CVE-2025-54597
LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter...
7.2CVSS5.5AI score0.00565EPSS
SaveExploits0References1
20