CVE-2022-23079
motoradmin - host header Injection in the reset password functionality
MEDIUM 6.8EPSS 1.4%
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.
- Affected
- motor-admin
- CVSS v2.0 NVD
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 1.38% chance of exploitation in the next 30 days, 72nd percentile
- Published
- 2022-06-22
- Updated
- 2024-09-16