Description

Masa CMS is an open source Enterprise Content Management platform. Prior to 7.2.8, 7.3.13, and 7.4.6, there is vulnerable to host header poisoning which allows account takeover via password reset email. This vulnerability is fixed in 7.2.8, 7.3.13, and 7.4.6.

Remediation

References

CVE-2024-32642

Related Vulnerabilities

WordPress Plugin mklasen's Photobox Cross-Site Scripting (1.0)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-40604)

RubyGems Deserialization of Untrusted Data Vulnerability (CVE-2017-0903)

Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-3554)

WordPress Plugin Google Forms Server-Side Request Forgery (0.91)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-346 CVE-2024-32642