How severe is CVE-2024-57177?

CVE-2024-57177 has a CVSS v3 score of 7.3 (HIGH).

CVE-2024-57177

7.3HIGH

A host header injection vulnerability exists in the NPM package of perfood/couch-auth <= 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to

Publicado: 2/10/2025Actualizado: 12/17/2025

Descripción

A host header injection vulnerability exists in the NPM package of perfood/couch-auth <= 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information

Análisis IAImpulsado por IA

Referencias

https://github.com/perfood/couch-auth
https://github.com/waristea/cve-research/tree/main/CVE-2024-57177