CVE-2020-25901

Description

Host Header Injection in Spiceworks 7.5.7.0 allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages.

Weakness classification

• CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Primary references

• cve@mitre.org — Exploit, Technical Description, Third Party Advisory, VDB Entry
• cve@mitre.org — Exploit, Vendor Advisory
• cve@mitre.org — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory