Home

Description

An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.

PUBLISHED Reserved 2024-03-19 | Published 2025-04-18 | Updated 2025-04-22 | Assigner mitre

References

medium.com/...header-injection-in-croogo-v3-0-2-0aded525f574 exploit

medium.com/...header-injection-in-croogo-v3-0-2-0aded525f574

cve.org (CVE-2024-29643)

nvd.nist.gov (CVE-2024-29643)

Download JSON