CVE-2022-23079

Name of the Vulnerable Software and Affected Versions motor-admin versions 0.0.1 through 0.2.56

Description The issue concerns host header injection in the password reset functionality. A malicious actor can exploit this to send fake password reset emails to arbitrary victims.

Recommendations For motor-admin versions 0.0.1 through 0.2.56, consider disabling the password reset functionality until a patch is available to prevent exploitation. Restrict access to the password reset module to minimize the risk of fake password reset emails being sent to victims.