CVE-2021-30185

by Fred · 07/04/2021

CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.

Date published : 2021-04-07