CVE Intelligence

Vulnerabilidades do Beehiveforum Beehive Forum

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Beehiveforum Beehive Forum: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:beehiveforum:beehive_forum

CVE-2022-50910 Crítica · 9.8 CWE-640 13/01/2026
Beehive Forum - Account Takeover
Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct authentication.