| Package | Affected versions | Patched versions |
|---|---|---|
| syspass | ≥ 3.2.0, ≤ 3.2.11 |
A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed in the victim's browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free