CVE-2022-38796

A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header

published September 14, 2022

CVSS
—
EPSS
1%
Percentile
48.1
In the wild
Unconfirmed
What it is

A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header. This can be exploited by abusing password reset emails.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00601 · 48.1th percentile
Published
2022-09-14T14:18Z
EPSS history
Timeline
  • 14 SEP 14:18Z
    A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header
    cvelistv5