VULNERABILITY INTELLIGENCE

CVE-2022-23079

CVSS score6.8 NONE

EPSS probability1.38%

CISA KEVNot currently listed

Published2022-06-22

Last modified2026-06-17

CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.

Weakness classification

vulnerabilitylab@mend.io: CWE-116

Primary references

vulnerabilitylab@mend.io — Patch, Third Party Advisory
vulnerabilitylab@mend.io — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory