Lucene search
Veracode Vulnerability DatabaseVERACODE:35376HistoryMay 05, 2022 - 2:11 a.m.
Host Header Injection
2022-05-0502:11:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
56.6%
snipe/snipe-it is vulnerable to host header injection. Host header in the reset password request is not handled properly, allowing an attacker to send malicious links to enable password reset token leak when clicked and leading to account take over.
| CPE | Name | Operator | Version |
|---|---|---|---|
| snipe/snipe-it | le | v5.3.10 | |
| snipe/snipe-it | le | v5.3.10 |
Related
nvd
nvd
CVE-2022-23064
2022-05-02 13:15:08
veracode
veracode
Host Header Injection
2022-05-04 15:26:06
osv
osv
snipe-IT vulnerable to host header injection
2022-05-03 00:00:43
CVE-2022-23064
2022-05-02 13:15:08
cve
cve
CVE-2022-23064
2022-05-02 13:15:08
prion
prion
Design/Logic Flaw
2022-05-02 13:15:00
cvelist
cvelist
CVE-2022-23064 Snipe-IT - Host Header Injection
2022-05-01 00:00:00
github
github
snipe-IT vulnerable to host header injection
2022-05-03 00:00:43