CVE-2022-23079CWE-116

motoradmin - host header Injection in the reset password functionality

published June 22, 2022

CVSS
—
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01383 · 72.0th percentile
Weakness
CWE-116 · Improper Encoding or Escaping of Output
Published
2022-06-22T13:05Z
EPSS history
Timeline
  • 22 JUN 13:05Z
    motoradmin - host header Injection in the reset password functionality
    cvelistv5