A host header attack vulnerability exists in FUEL CMS 1.5... · CVE-2021-38290 · GitHub Advisory Database · GitHub

A host header attack vulnerability exists in FUEL CMS 1.5...

High severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A host header attack vulnerability exists in FUEL CMS 1.5.0 through fuel/modules/fuel/config/fuel_constants.php and fuel/modules/fuel/libraries/Asset.php. An attacker can use a man in the middle attack such as phishing.

References

Published by the National Vulnerability Database

Aug 9, 2021

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 30, 2023