CVE-2022-23064CWE-74

Snipe-IT - Host Header Injection

High · published May 2, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This leads to account take over.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01322 · 70.7th percentile
Weakness
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Published
2022-05-02T12:30Z
EPSS history
Timeline
  • 02 MAY 12:30Z
    Snipe-IT - Host Header Injection
    cvelistv5