CVE-2022-23079

EUVD-2022-28186
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Affected Products (NVD)
VendorProductVersion
getmotoradminmotor_admin
0.0.1 ≤
𝑥
≤ 0.2.56
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/motor-admin/motor-admin/commit/a461b7507940a1fa062836daa89c82404fe3ecf9
https://www.mend.io/vulnerability-database/CVE-2022-23079
https://github.com/motor-admin/motor-admin/commit/a461b7507940a1fa062836daa89c82404fe3ecf9
https://www.mend.io/vulnerability-database/CVE-2022-23079