Lucene search
+L

3 matches found

NVD
NVD
added 2024/09/26 5:15 p.m.17 views

CVE-2024-45982

A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

8.8CVSS0.00347EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/26 12:0 a.m.50 views

CVE-2024-45982

CVE-2024-45982 affects scheduleR v0.0.18 and is described as a host header injection vulnerability. The underlying issue allows an attacker to obtain a password reset token by user interaction with a crafted password reset link, enabling arbitrary password resets and account compromise. The Red H...

8.8CVSS7.2AI score0.00347EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/26 12:0 a.m.22 views

CVE-2024-45982

A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

0.00347EPSS
SaveExploits0References1
Rows per page
Query Builder