CVE-2021-30185

Summary:

CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.

Reference Links(if available):

CVSS Score (if available)

v2: / MEDIUM

v3: /

Links to Exploits(if available)