Ahmed-elgaml11 vulnerabilities
We track 1 vulnerability in Ahmed-elgaml11 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 7, 2025.
1vulnerabilities
0critical
1high
0exploited
8.9average CVSS score
Latest Ahmed-elgaml11 vulnerabilities
- 8.9 High severity
Natours: Weak Password Recovery Mechanism for Forgotten Password
Natours is a Tour Booking API. The attacker can easily take over any victim account by injecting an attacker-controlled server domain in the Host header when requesting the /forgetpassword endpoint. This vulnerability is fixed with commit 7401793a8d9ed0f0c250c