Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Userfrosting Subscribe
Filtered by product Userfrosting
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25994 1 Userfrosting 1 Userfrosting 2022-01-13 6.8 MEDIUM 8.8 HIGH
In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully take over their account.