← Database

CVE-2022-23079

MEDIUM CVSS: 6.8 Published: 2022-06-22 Modified: 2026-06-17

Description

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.

Affected Platforms

Getmotoradmin Motor Admin

Weakness Type

CWE-116

References