CVE-2024-42903
A Host header injection vulnerability in the password reset function of LimeSurvey v.6.6.1+240806 and before allows attackers to send users a crafted...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A Host header injection vulnerability in the password reset function of LimeSurvey v.6.6.1+240806 and before allows attackers to send users a crafted password reset link that will direct victims to a malicious domain.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web github.com