漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A host header injection vulnerability exists in the NPM package of perfood/couch-auth <= 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CouchAuth 注入漏洞
Vulnerability Description
CouchAuth是Perfood开源的一个身份验证API。 CouchAuth 0.21.2及之前版本存在注入漏洞，该漏洞源于NPM包存在主机头注入，允许攻击者通过特制请求触发SSTI，泄露信息或执行命令。
CVSS Information
N/A
Vulnerability Type
N/A