mrbs-code vulnerabilities
2 known vulnerabilities in mrbs-code from Meeting-room-booking-system. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest first
- 8.1 High severity
mrbs-code: Weak Password Recovery Mechanism for Forgotten Password
MRBS before 1.13.0 contains a password reset poisoning vulnerability that allows unauthenticated attackers to redirect reset links by forging the Host header when $url_base is unset. Attackers can request a reset for a victim so AuthDb::notifyUser() emails a l
- 8.7 High severity
mrbs-code: Server-Side Request Forgery
The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available.