Threat database

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 1.0%	CVE-2024-26470fullstackhero.webapi.boilerplate · n/a High8.1EPSS 1.0%2024-02-27CVE Database V5CVE-2024-26470 A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request. EPSS 1.0%Vulnerability	CVE Database V5	2024-02-27

Page 1 of 1