Unrated severityNVD Advisory· Published Jun 22, 2022· Updated Sep 16, 2024
motoradmin - host header Injection in the reset password functionality
CVE-2022-23079
Description
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.
Affected products
1- Range: 0.0.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/motor-admin/motor-admin/commit/a461b7507940a1fa062836daa89c82404fe3ecf9mitrex_refsource_MISC
- www.mend.io/vulnerability-database/CVE-2022-23079mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.