2 matches found
CVE-2021-43437: Improper Neutralization of Special Elements in Output Used by a Downstream Component
In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites are hosted on the same IP address. This is where the Host Header comes in. Thi...
8.8CVSS6AI score0.01268EPSS
SaveExploits0References2
PT-2021-23843
Name of the Vulnerable Software and Affected Versions sourcecodetester Engineers Online Portal affected versions not specified Description The issue allows an attacker to manipulate the Host header, causing the web application to behave in unexpected ways. This is particularly relevant when...
8.8CVSS0.01268EPSS
SaveExploits0References6
20