Description
Retool (self-hosted) before 3.196.0 allows Host header injection. When the BASE_DOMAIN environment variable is not set, the HTTP host header can be manipulated.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Retool | Retool | 3.18.1 – ≤ 3.18.23, 3.20.1 – ≤ 3.20.18, 3.22.1 – ≤ 3.22.21, 3.24.1 – ≤ 3.24.22, 3.26.4 – ≤ 3.26.14, 3.28.3 – ≤ 3.28.15, 3.30.1 – ≤ 3.30.15, 3.32.1 – ≤ 3.32.12, 3.33.1-stable – ≤ 3.33.37-stable, 3.52.1-stable – ≤ 3.52.28-stable, 3.75.1-stable – ≤ 3.75.25-stable, 3.114.1-stable – ≤ 3.114.22-stable, 3… | — |