CVE-2024-29643 - An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component

MEDIUM

An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component

Published Apr 18, 2025

5.5

MEDIUM

CVSS 4.0

EPSS 0.57%

An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.

No remediation recorded yet.

Weaknesses (2)

CWE-444

CWE-74

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-26645		Advisory
https://github.com/advisories/GHSA-847x-x4jg-6gf4		Advisory
https://github.com/croogo/croogo/issues/1005
https://medium.com/@christbowel6/cve-2024-29643-host-header-injection-in-croogo-v3-0-2-0aded525f574		exploitPress/Media Coverage
https://nvd.nist.gov/vuln/detail/CVE-2024-29643