medium5.4
CVE-2020-11814
A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites.
Impact
A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qdpm | Qdpm | Version 9.1 |