← All advisories

Unrated severityOSV Advisory· Published Dec 20, 2018· Updated Aug 5, 2024

CVE-2018-16627

CVE-2018-16627

Description

panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.

Affected products

2

Getkirby/PanelOSV
Range: 2.0.0, 2.0.2, 2.0.3, …
Getkirby/Kirbyllm-fuzzy
Range: = 2.5.12

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.