A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link.
References
Configurations
History
06 Nov 2024, 19:19
Type | Values Removed | Values Added |
---|---|---|
First Time |
Idrsdev agile-board
Idrsdev |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
CPE | cpe:2.3:a:idrsdev:agile-board:1.0:*:*:*:*:*:*:* | |
References | () https://github.com/idrsdev/agile-board/tree/main - Product | |
References | () https://github.com/redtrib3/CVEs/tree/main/CVE-2024-51329%20-%20Host%20Header%20Injection - Exploit |
05 Nov 2024, 21:35
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
CWE | CWE-94 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
04 Nov 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-11-04 18:15
Updated : 2024-11-06 19:19
NVD link : CVE-2024-51329
Mitre link : CVE-2024-51329
CVE.ORG link : CVE-2024-51329
JSON object : View
Products Affected
idrsdev
- agile-board
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')