VULNERABILITY INTELLIGENCE

CVE-2024-45981

CVSS score8.8 HIGH

EPSS probability0.37%

CISA KEVNot currently listed

Published2024-09-26

Last modified2026-06-17

Description

A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link.