CVE-2024-51329

Summary

CVE-2024-51329 represents a Host header injection vulnerability in Agile-Board 1.0. This issue permits attackers to manipulate password reset links by injecting malicious Host headers during user interactions. Consequently, attackers can trick users into visiting fraudulent websites and ultimately obtain password reset tokens. This vulnerability poses a significant risk, particularly for organizations that rely on Agile-Board for project management, as it can lead to unauthorized access to user accounts. Users are strongly advised to update to the latest version of Agile-Board as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.