Description (CNA)
eramba through c2.8.1 allows HTTP Host header injection with (for example) resultant wkhtml2pdf PDF printing by authenticated users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://discussions.eramba.org/t/bug-injectable-host-header-security-issue/1719
- https://www.eramba.org/releases
ADP enrichment
No English description supplied.