Security Advisory
CVE-2024-42903
6.5
MEDIUM
Vulnerability Description
A Host header injection vulnerability in the password reset function of LimeSurvey v.6.6.1+240806 and before allows attackers to send users a crafted password reset link that will direct victims to a malicious domain.
Published Date
September 3, 2024
Official Source
NIST NVD Advisory