New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2024-42915

NVDCIRCLENISA

EUVD-2024-39825 · Published Aug 23, 2024

A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This will allow attackers to arbitrarily reset other users' passwords and compromise their accounts.

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot