userfrosting

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

userfrosting records in CISA KEV

No userfrosting vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Userfrosting · all components

TI-2021-08000 CVE-2021-25994 · GHSA-cv25-3gmg-c6m8

MEDIUM 41

In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.016 Published 2022-01-03 Fixed in 4.6.3 CWE-74