https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 11:08:20 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-05493 cnvd-2022-05493 https://cve.radiocsirt.org/vuln/cnvd-2022-05493 https://cve.radiocsirt.org/vuln/euvd-2026-24967 EUVD-2026-24967 https://cve.radiocsirt.org/vuln/euvd-2026-24967 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25994 <p>In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully take over their account.</p> <p>In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully take over their account.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-25994 https://cve.radiocsirt.org/vuln/ghsa-cv25-3gmg-c6m8 <p><strong>Affected:</strong> Packagist: userfrosting/userfrosting</p> <p>In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully take over their account.</p> <p><strong>Affected:</strong> Packagist: userfrosting/userfrosting</p> <p>In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully take over their account.</p> https://cve.radiocsirt.org/vuln/ghsa-cv25-3gmg-c6m8 https://cve.radiocsirt.org/vuln/gsd-2021-25994 gsd-2021-25994 https://cve.radiocsirt.org/vuln/gsd-2021-25994