NuGet package
fullstackhero.webapi.boilerplate
pkg:nuget/fullstackhero.webapi.boilerplate
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-26470 | Hig | 8.1 | >= 1.0.0, <= 1.0.1 | — | Feb 29, 2024 | A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request. |
- affected >= 1.0.0, <= 1.0.1
A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request.