CVE-2025-47424

7.1HIGH

Retool (self-hosted) before 3.196.0 allows Host header injection. When the BASE_DOMAIN environment variable is not set, the HTTP host header can be manipulated.

게시됨: 5/9/2025업데이트됨: 5/12/2025
NVD에서 보기MITRE에서 보기

설명

Retool (self-hosted) before 3.196.0 allows Host header injection. When the BASE_DOMAIN environment variable is not set, the HTTP host header can be manipulated.

AI 분석AI 기반

참조