CVE-2025-43932

The JobCenter application (versions through 7e7b0b2 ) is vulnerable to account takeover via its password reset feature. The root cause is an unconfigured SERVER_NAME , which forces the password reset process to rely on the Host HTTP header . To remediate this, administrators should configure the ...

CVE-2025-43932

JobCenter through 7e7b0b2 allows account takeover via the password reset feature because SERVERNAME is not configured and thus a reset depends on the Host HTTP header...

CVE-2025-43930

Hashview 0.8.1 allows account takeover via the password reset feature because SERVERNAME is not configured and thus a reset depends on the Host HTTP header...