Vulnerabilidades do Beehiveforum Beehive Forum
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Beehiveforum Beehive Forum: 1 registro(s), com versões afetadas e correções.cpe:2.3:a:beehiveforum:beehive_forum
CVE-2022-50910
Crítica · 9.8
CWE-640 13/01/2026
Beehive Forum - Account Takeover
Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct authentication.