| Package | Affected versions | Patched versions |
|---|---|---|
| motor admin | ≥ 0.0.1, ≤ 0.2.56 |
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free