Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2024-26470

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-75x2-6h4m-h6mx

FullStackHero's WebAPI Boilerplate host header injection vulnerability A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request.

gitlab/nuget/FullStackHero.WebAPI.Boilerplate/CVE-2024-26470

FullStackHero's WebAPI Boilerplate host header injection vulnerability A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request.