Skip to main content

CVE detail

CVE-2024-29643

An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.

CVSS 9.1 · Critical