An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://medium.com/@christbowel6/cve-2024-29643-host-header-injection-in-croogo-v3-0-2-0aded525f574 | Exploit Press/Media Coverage |
https://medium.com/@christbowel6/cve-2024-29643-host-header-injection-in-croogo-v3-0-2-0aded525f574 | Exploit Press/Media Coverage |
Configurations
History
28 May 2025, 15:51
Type | Values Removed | Values Added |
---|---|---|
References | () https://medium.com/@christbowel6/cve-2024-29643-host-header-injection-in-croogo-v3-0-2-0aded525f574 - Exploit, Press/Media Coverage | |
First Time |
Croogo
Croogo croogo |
|
CPE | cpe:2.3:a:croogo:croogo:3.0.2:*:*:*:*:*:*:* |
18 Apr 2025, 15:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-04-18 15:15
Updated : 2025-05-28 15:51
NVD link : CVE-2024-29643
Mitre link : CVE-2024-29643
JSON object : View
Products Affected
croogo
- croogo
CWE
No CWE.