Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Header Poisoning in Raytha CMS
Vulnerability Description
Raytha CMS allows an attacker to spoof `X-Forwarded-Host` or `Host` headers to attacker controlled domain. The attacker (who knows the victim's email address) can force the server to send an email with password reset link pointing to the domain from spoofed header. When victim clicks the link, browser sends request to the attacker’s domain with the token in the path allowing the attacker to capture the token. This allows the attacker to reset victim's password and take over the victim's account. This issue was fixed in version 1.4.6.
CVSS Information
N/A
Vulnerability Type
使用不可信的源
Vulnerability Title
Raytha CMS 安全漏洞
Vulnerability Description
Raytha CMS是美国Raytha公司的一个内容管理系统。 Raytha CMS 1.4.6之前版本存在安全漏洞，该漏洞源于允许攻击者伪造X-Forwarded-Host或Host标头指向攻击者控制的域，可能导致攻击者强制服务器发送指向伪造域的重置密码链接邮件，从而捕获令牌并接管受害者账户。
CVSS Information
N/A
Vulnerability Type
N/A