PUBLISHED
2026-05-04 07:15
MODIFIED
2026-05-04 07:15
EPSS (Prob. Exploit)
0.25%
Top 83.6%
> DESCRIPTION
phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When force_server_vars is disabled, the servers hostname may be extracted from the HTTP Host header which is used to generate the password reset link URL. An attacker who can manipulate the Host header (e.g. through misconfigured host setup or missing header validation by the webserver) can cause password reset emails to contain a link pointing to an attacker-controlled domain, potentially leading to account takeover.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-640: Weak Password Recovery Mechanism for Forgotten Password - The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.
> GITHUB SECURITY ADVISORY
GHSA-7gm6-w7mx-58cr
HIGH
phpBB has Password Reset Link Poisoning via Host Header injection
AFFECTED PACKAGES:
COMPOSER / phpbb/phpbb
= 4.0.0-a1
Fixed in: 4.0.0-a2
COMPOSER / phpbb/phpbb
>= 3.0.0, < 3.3.16
Fixed in: 3.3.16
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
AFFECTED PACKAGES:
Unknown / Unknown
1 versions affected
ALIASES:
GHSA-7gm6-w7mx-58cr
> HISTORIQUE DES MODIFICATIONS
Première apparition
04/05/2026 07:15
Source: NVD
📊
ENRICHISSEMENT
01/06/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-640: Weak Password Recovery Mechanism for Forgotten Password - The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechan...
Total des modifications: 1
Dernière mise à jour: 5 months ago