CVE-2016-7903

Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link…

published January 4, 2017

CVSS
—
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01124 · 65.8th percentile
Published
2017-01-04T21:00Z
EPSS history
Timeline
  • 04 JAN 21:00Z
    Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link…
    cvelistv5