EUVD-2024-39825 · Published Aug 23, 2024
A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This will allow attackers to arbitrarily reset other users' passwords and compromise their accounts.
References
Potentially impacted assets
See if this affects your attack surface




