Description
An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | croogo/croogo | <= 3.0.2 | — | GHSA-847x-x4jg-6gf4 |
Critical · 9.1
CVE-2024-29643
EUVD-2024-26645GHSA-847x-x4jg-6gf4
croogo Host header injection
Published Apr 18, 2025 · Updated Apr 22, 2025 · Assigned by mitre