CVE-2024-51329

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-11-04 · updated 2026-06-17
Weakness: CWE-94

Description

A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link.

Affected products

Idrsdev Agile-Board: 1.0

References

https://github.com/idrsdev/agile-board/tree/main
https://github.com/redtrib3/CVEs/tree/main/CVE-2024-51329%20-%20Host%20Header%20Injection

Get alerted when CVE-2024-51329 or the next vulnerability affects your stack