Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-26470
8.1
HIGHCVSS v3
Published
February 29, 2024
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request.
FullStackHero.WebAPI.Boilerplate
NuGet GalleryClean Architecture Template for .NET 7.0 WebAPI built with Multitenancy Support.
NuGet GalleryClean Architecture Template for .NET 7.0 WebAPI built with Multitenancy Support.>= 1.0.0, <= 1.0.1NVD
fullstackhero/dotnet-starter-kit
GitHubProduction Grade Cloud-Ready .NET 10 Starter Kit (Web API + React Client) with Multitenancy Support, and Clean/Modular Architecture that saves roughly 200+ Development Hours! All Batteries Included.
GitHubProduction Grade Cloud-Ready .NET 10 Starter Kit (Web API + React Client) with Multitenancy Support, and Clean/Modular Architecture that saves roughly 200+ Development Hours! All Batteries Included.NVD