Executive Summary

This vulnerability in Piwigo 15.6.0 involves the password reset function, which sends a password-reset URL based on the HTTP request's Host header without validating it. An attacker can exploit this by modifying the hostname in the URL sent to a user whose username or email is known or guessed, potentially redirecting the user to a malicious site.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to phishing attacks where users receive password reset links with malicious hostnames, potentially allowing attackers to steal credentials or reset passwords unauthorizedly. This compromises confidentiality and integrity of user accounts.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Piwigo to version 15.7.0 or later, where this vulnerability has been patched. Until the upgrade is applied, consider restricting access to the password reset function or monitoring for suspicious password reset requests that may exploit the Host header manipulation.

Useful 0 Not Useful 0