Security Advisory

CVE-2021-45226

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-24 19:57:39
Last updated 2024-08-04 04:39:20
Assigner mitre
State PUBLISHED

Description

An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause it to send password-reset e-mails pointing to arbitrary websites.