CVE-2020-27687 in ThingsBoard
요약
\~에 의해 MITRE • 2020. 12. 19.
ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.