Unrated

Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset addre...

CVE-2016-7903 First seen on SecPulse Jan 5, 2017

Original description The description as published by the source.

Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch dotclear.org
patch hg.dotclear.org
web securityfocus.com
web openwall.com

Key facts

Severity: Unrated
Published: Jan 5, 2017
First seen on SecPulse: Jan 5, 2017

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:47