Lucene search
Veracode Vulnerability DatabaseVERACODE:35018HistoryApr 08, 2022 - 7:54 a.m.
Host Header Injection
2022-04-0807:54:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
remdex livehelperchat host header injection password reset vulnerability malicious attacker user account
EPSS
0.002
Percentile
56.5%
remdex/livehelperchat is vulnerable to host header injection. The library does not properly validate the URL for password reset which allows a malicious attacker to generate a fake password link and take over the user account
Related
cvelist
cvelist
prion
prion
Design/Logic Flaw
2022-04-07 19:15:00
huntr
huntr
Host Header injection in password Reset
2022-03-11 16:05:20
osv
osv
BIT-livehelperchat-2022-0935
2024-03-06 10:56:15
CVE-2022-0935
2022-04-07 19:15:08
cve
cve
CVE-2022-0935
2022-04-07 19:15:08
cnvd
cnvd
An unspecified vulnerability exists in livehelperchat (CNVD-2022-55057)
2022-04-11 00:00:00
nvd
nvd
CVE-2022-0935
2022-04-07 19:15:08