CVE-2025-70948

Published: Mar 5, 2026Modified: Jun 17, 2026Deferred

9.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.8

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A host header injection vulnerability in the mailer component of @perfood/couch-auth v0.26.0 allows attackers to obtain reset tokens and execute an account takeover via spoofing the HTTP Host header.

Related CWEs

CWE-644

Improper Neutralization of HTTP Headers for Scripting Syntax

The product does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers, such as Flash.

References (3)

https://gist.github.com/0xHunterr/38aab644874ca9f4646524c5b01cfe5e

Source: cve@mitre.org

https://github.com/perfood/couch-auth

Source: cve@mitre.org

https://www.npmjs.com/package/@perfood/couch-auth

Source: cve@mitre.org

Timeline

No history available yet.