medium4.3
CVE-2020-28031
eramba through c2.8.1 allows HTTP Host header injection with (for example) resultant wkhtml2pdf PDF printing by authenticated users.
Impact
eramba through c2.8.1 allows HTTP Host header injection with (for example) resultant wkhtml2pdf PDF printing by authenticated users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eramba | Eramba | Version 2.8.1 |