Skip to content
OpenAdvisories

Package · NuGet

FullStackHero.WebAPI.Boilerplate

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    CVE-2024-26470

    FullStackHero's WebAPI Boilerplate host header injection vulnerability

    A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request.

    FullStackHero.WebAPI.Boilerplate NuGet