CVE-2021-30185
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.
Published: 2021-04-07 · CVSS: Unscored
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7