Fullstackhero

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Fullstackhero records in CISA KEV

No Fullstackhero vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

.net 9 Starter Kit 1 record LOW

Records

1 record in .net 9 Starter Kit · all components

TI-2024-17428 CVE-2024-26470 · GHSA-75x2-6h4m-h6mx

A host header injection vulnerability in the forgot password function of FullStackHero's…

LOW 39

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0104 Published 2024-02-27 No fix listed CWE-200

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0