PT-2022-15835
CVE-2022-23079
·
تاريخ النشر
2022-06-22
·
تاريخ التحديث
2022-06-29
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
motor-admin versions 0.0.1 through 0.2.56
Description
The issue concerns host header injection in the password reset functionality. A malicious actor can exploit this to send fake password reset emails to arbitrary victims.
Recommendations
For motor-admin versions 0.0.1 through 0.2.56, consider disabling the password reset functionality until a patch is available to prevent exploitation. Restrict access to the password reset module to minimize the risk of fake password reset emails being sent to victims.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾