From 83fb3f2c1b621b363903681c98d2c4c2fb8fa9e8 Mon Sep 17 00:00:00 2001 From: Jongwon Baek Date: Tue, 29 Nov 2022 14:48:51 +0900 Subject: [PATCH] Update CVE-2021-38751.yaml --- cves/2021/CVE-2021-38751.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cves/2021/CVE-2021-38751.yaml b/cves/2021/CVE-2021-38751.yaml index 84b24e75e3..6eeae88d11 100644 --- a/cves/2021/CVE-2021-38751.yaml +++ b/cves/2021/CVE-2021-38751.yaml @@ -1,7 +1,7 @@ id: CVE-2021-38751 info: - name: ExponentCMS <= 2.6 Host Header Injection + name: ExponentCMS <= 2.6 - Host Header Injection author: dwisiswant0 severity: medium description: An HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponent_constants.php. A modified HTTP header can change links on the webpage to an arbitrary value,leading to a possible attack