https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T10:27:20.589682+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-05493 cnvd-2022-05493 2026-10-24T10:27:20.640805+00:00 cnvd-2022-05493 https://cve.radiocsirt.org/vuln/euvd-2026-24967 EUVD-2026-24967 2026-10-24T10:27:20.640844+00:00 EUVD-2026-24967 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25994 fkie_cve-2021-25994 2026-10-24T10:27:20.640859+00:00

In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully take over their account.

 https://cve.radiocsirt.org/vuln/ghsa-cv25-3gmg-c6m8 GHSA-cv25-3gmg-c6m8 — Injection in UserFrosting 2026-10-24T10:27:20.640892+00:00

Affected: Packagist: userfrosting/userfrosting

In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully take over their account.

 https://cve.radiocsirt.org/vuln/gsd-2021-25994 gsd-2021-25994 2026-10-24T10:27:20.640917+00:00 gsd-2021-25994