Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-23079

motoradmin - host header Injection in the reset password functionality

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mend

Description

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

motor-admin motor-admin

  • 0.0.1 to < unspecifiedaffected
  • unspecified to ≤ 0.2.56affected

References