Description
A host header attack vulnerability exists in FUEL CMS 1.5.0 through fuel/modules/fuel/config/fuel_constants.php and fuel/modules/fuel/libraries/Asset.php. An attacker can use a man in the middle attack such as phishing.
Unscored
CVE-2021-38290
EUVD-2021-24748GHSA-7hhp-9v6r-9h4x
A host header attack vulnerability exists in FUEL CMS 1.5.0 through fuel/modules/fuel/config/fuel_constants.php and fuel/modules/fuel/libra…
Published Aug 9, 2021 · Updated Aug 4, 2024 · Assigned by mitre