medium4.3
CVE-2024-38485
Dell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability.
Impact
Dell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability. A remote low-privileged attacker could potentially exploit this vulnerability to trigger redirections that leads to sensitive information leakage.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Elastic Cloud Storage | before 3.8.0.0 |