Description
A Host header injection vulnerability in the password reset function of LimeSurvey v.6.6.1+240806 and before allows attackers to send users a crafted password reset link that will direct victims to a malicious domain.
Medium · 6.5
CVE-2024-42903
EUVD-2024-39819GHSA-8gv7-8h2v-9w6c
A Host header injection vulnerability in the password reset function of LimeSurvey v.6.6.1+240806 and before allows attackers to send users…
Published Sep 3, 2024 · Updated Mar 13, 2025 · Assigned by mitre