CVE-2018-9934

Description

The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to specify a web server under the attacker's control.

References

http://www.cnblogs.com/babers/p/8745739.html

http://www.cnblogs.com/babers/p/8503116.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS