CVE-2022-23079 — motoradmin - host header Injection in the reset password functionality

CVE-2022-23079

motoradmin - host header Injection in the reset password functionality PUBLISHED

Description (CNA)

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.

Affected (CNA)

Vendor / product	Versions
motor-admin / motor-admin	affected 0.0.1 before unspecified; affected unspecified through 0.2.56

CWE

CWE-116

References

https://www.mend.io/vulnerability-database/CVE-2022-23079
https://github.com/motor-admin/motor-admin/commit/a461b7507940a1fa062836daa89c82404fe3ecf9

ADP enrichment

CVE

No English description supplied.

https://www.mend.io/vulnerability-database/CVE-2022-23079
https://github.com/motor-admin/motor-admin/commit/a461b7507940a1fa062836daa89c82404fe3ecf9