nuget FullStackHero.WebAPI.Boilerplate vulnerabilities

Latest nuget FullStackHero.WebAPI.Boilerplate CVEs

Newest publication first

1. CVE-2024-26470 FullStackHero's WebAPI Boilerplate host header injection vulnerability

   Published 2024-02-27

   High·CVSS 8.1 EPSS 1.0% PoC

   A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.