← All advisories

High severityNVD Advisory· Published Apr 7, 2021· Updated Aug 3, 2024

CVE-2021-30185

CVE-2021-30185

Description

CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
indicoPyPI	< 2.3.4	2.3.4

Affected products

2

CERN/Indicodescription
ghsa-coords
pkg:pypi/indico
Range: < 2.3.4

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-wgpj-7c2j-vfjmghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-30185ghsaADVISORY
github.com/indico/indico/releases/tag/v2.3.4ghsax_refsource_MISCWEB
github.com/indico/indico/security/advisories/GHSA-wgpj-7c2j-vfjmghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/indico/PYSEC-2021-18.yamlghsaWEB
www.shorebreaksecurity.com/blogghsaWEB
www.shorebreaksecurity.com/blog/mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.