CVE-2021-45226

An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause it to send password-reset e-mails pointing to arbitrary websites.

An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause it to send password-reset e-mails pointing to arbitrary websites.

Se ha detectado un problema en COINS Construction Cloud versión 11.12. Debido a una comprobación inapropiada de los encabezados HTTP controlados por el usuario, los atacantes pueden causar que sean enviados correos electrónicos de restablecimiento de contraseña que apunten a sitios web arbitrarios