CVE-2020-25901
MEDIUMSpiceworks 7.5.7.0 - Open Redirect via Host Header Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-25901. PoCs published by Ramikan.
AI-analyzed exploit summary This exploit demonstrates a Host Header Injection vulnerability in Spiceworks 7.5.7.0, allowing an attacker to manipulate the Host header to redirect users to arbitrary domains. The PoC includes HTTP requests and responses showing the injection and subsequent redirection.
Description
Host Header Injection in Spiceworks 7.5.7.0 allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages.
Exploits (1)
This exploit demonstrates a Host Header Injection vulnerability in Spiceworks 7.5.7.0, allowing an attacker to manipulate the Host header to redirect users to arbitrary domains. The PoC includes HTTP requests and responses showing the injection and subsequent redirection.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N