← All advisories

High severity7.5NVD Advisory· Published Apr 7, 2021· Updated Jun 17, 2026

CVE-2021-30185

CVE-2021-30185

Description

CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
indicoPyPI	< 2.3.4	2.3.4

Affected products

3

Cern/Indico2 versions
cpe:2.3:a:cern:indico:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cern:indico:*:*:*:*:*:*:*:*range: <2.3.4
- (no CPE)
ghsa-coords
pkg:pypi/indico
Range: < 2.3.4

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-wgpj-7c2j-vfjmghsaADVISORY
github.com/indico/indico/releases/tag/v2.3.4nvdRelease NotesThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2021-30185ghsaADVISORY
www.shorebreaksecurity.com/blog/nvdThird Party Advisory
github.com/indico/indico/security/advisories/GHSA-wgpj-7c2j-vfjmghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/indico/PYSEC-2021-18.yamlghsaWEB
www.shorebreaksecurity.com/blogghsaWEB

News mentions

0

No linked articles in our index yet.