auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in the HTTP Host header.

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

• advisory github.com
• advisory github.com
• advisory github.com
• patch github.com