CVE-2024-29643

描述

An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.

受影響套件(1)

• Packagist/croogo/croogofrom 0, <= 3.0.2

CVSS 分數

參考連結(4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-29643
• PATCHhttps://github.com/croogo/croogo
• WEBhttps://github.com/croogo/croogo/issues/1005
• WEBhttps://medium.com/@christbowel6/cve-2024-29643-host-header-injection-in-croogo-v3-0-2-0aded525f574