| Package | Affected versions | Patched versions |
|---|---|---|
| passbolt api | < 5.0.0 | 5.0.0 |
Passbolt API before 5, if the server is misconfigured (with an incorrect installation process and disregarding of Health Check results), can send email messages with a domain name taken from an attacker-controlled HTTP Host header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free