medium6.1
CVE-2022-38796
A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header.
Impact
A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header. This can be exploited by abusing password reset emails.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Feehi | Feehi Cms | Version 2.1.1 |