CVE-2024-45982
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Sep 26, 2024
Updated: Sep 30, 2024
CWE ID 284
Summary
CVE-2024-45982 is a host header injection vulnerability affecting scheduleR version 0.0.18. Attackers can exploit this weakness by crafting a malicious password reset link. When an unsuspecting user clicks on the link, they unknowingly reset another user's password, providing the attacker with the ability to compromise accounts. This vulnerability poses a significant risk to organizations using scheduleR for user account management.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Scheduler