We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts.
Reserved 2024-09-11 | Published 2024-09-26 | Updated 2024-09-26 | Assigner mitregithub.com/soursec/CVEs/tree/main/CVE-2024-45980
Support options
