Threats affecting pkg:github/Dancer2-Plugin-Auth-Extensible

Dancer2::Plugin::Auth::Extensible versions up to 0.713 for Perl contain a critical vulnerability in their password recovery mechanism. The flaw allows an attacker to poison the password reset link by manipulating the HTTP Host header or X-Forwarded-Host header. This causes the reset email to contain a link pointing to an attacker-controlled host. When a user clicks this link, the attacker gains access to a valid password reset code, enabling account takeover. The vulnerability affects default configurations with reset_password_handler enabled and default message text. Versions 0.711 and earlier read the request URI base directly, while versions 0.712 and later introduce a configuration key that defaults to the untrusted request URI base if unset.