We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL.
Reserved 2024-09-11 | Published 2025-06-09 | Updated 2025-06-09 | Assigner mitregithub.com/codervivek5/VigyBag
github.com/...ulnerability-research/tree/main/CVE-2024-46452
Support options