← Back

.net 9 Starter Kit

.net_9_starter_kit

Vendor: Fullstackhero • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-26470
1Fullstackhero
1.net 9 Starter Kit
Jun 17, 2026
Feb 29, 2024
N/A· v4
8.1 HIGH· v3
N/A· v2
A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request.