critical9.1
CVE-2024-29643
croogo Host header injection
Impact
An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | croogo/croogo | <= 3.0.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Croogo | Croogo | Version 3.0.2 |