CVE-2020-10792

openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self::STAGING option by placing a hostname containing "dev" or "staging" in the HTTP Host header...

PT-2020-12326

Name of the Vulnerable Software and Affected Versions openITCOCKPIT versions 3.7.2 and earlier Description The issue allows remote attackers to configure certain options by manipulating the HTTP Host header with specific keywords. This can be achieved by placing a hostname containing dev or stagi...