Host Header Injection Vulnerability in qdPM Web-Based Project Management Software
CVE-2020-11814

5.4MEDIUM

Key Information:

Vendor

Qdpm

Status
Qdpm
Vendor
CVE Published:
16 April 2020

What is CVE-2020-11814?

A identified vulnerability in qdPM 9.1 allows attackers to manipulate the host header, potentially leading to the redirection of users to malicious sites. This can pose significant risks as users may unknowingly disclose sensitive information or become victims of phishing attacks. Organizations utilizing qdPM should take proactive measures to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://fatihhcelik.blogspot.com/2020/01/qdpm-web-based-p...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.