CVE-2024-54840

CVE-2024-54840 describes a vulnerability in CyberArk Privileged Access Manager Self-Hosted PVWA before 14.4, where environment handling can lead to Host header injection. The issue arises from how PVWA resolves environment context, enabling manipulation of the HTTP Host header in affected deploym...