← All advisories

Medium severity6.1OSV Advisory· Published Dec 20, 2018· Updated Jun 17, 2026

CVE-2018-16627

CVE-2018-16627

Description

panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.

Affected products

3

Getkirby/PanelOSV
Range: 2.0.0, 2.0.2, 2.0.3, …
Getkirby/Kirby
cpe:2.3:a:getkirby:kirby:2.5.12:*:*:*:*:*:*:*
Kirby CMS/Kirby CMSllm-fuzzy
Range: =2.5.12

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.