Couchauth vulnerabilities
1 known vulnerability in Couchauth from Perfood. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score
Latest first
- 9.6 Critical severity
Couchauth: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A host header injection vulnerability exists in the NPM package @perfood/couch-auth versions <= 0.20.0. By sending a specially crafted host header in the forgot password request, it is possible to send password reset links to users which, once clicked, lead to