An issue was discovered in COINS Construction Cloud 11.12
published January 24, 2022
CVSS
—
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is
An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause it to send password-reset e-mails pointing to arbitrary websites.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01384 · 72.0th percentile
Published
2022-01-24T19:57Z
EPSS history
Timeline
24 JAN 19:57Z
An issue was discovered in COINS Construction Cloud 11.12