CVE-2022-23079

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.

Score

CVSS 2.0 6.8 Medium

Status

Modified - vulnerabilitylab@mend.io

Published

2022-06-22

Last modified

2024-09-16

Weaknesses

CWE-116

Affected products

• Motor Admin (Getmotoradmin)
• Motor-admin (Motor-admin)

References

• https://github.com/motor-admin/motor-admin/commit/a461b7507940a1fa062836daa89c82404fe3ecf9
• https://www.mend.io/vulnerability-database/CVE-2022-23079