CVE-2024-29643

An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - cve@mitre.org

Published

2025-04-18

Last modified

2025-04-22

Weaknesses

CWE-444

Affected products

• Croogo (Croogo)

References

• https://medium.com/@christbowel6/cve-2024-29643-host-header-injection-in-croogo-v3-0-2-0aded525f574