CyberRota Analysis
AI-GeneratedSylius versions prior to 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 are vulnerable due to improper validation of the Host header in password-reset links, enabling unauthenticated attackers to redirect reset tokens to malicious domains. This flaw allows attackers to request password resets for administrator accounts and potentially seize control of those accounts. Organizations using affected versions should prioritize remediation to protect against unauthorized account access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 build administrator password-reset links using the request Host header without validation, allowing unauthenticated attackers to redirect reset tokens to attacker-controlled domains. Attackers can request password resets for known administrator email addresses with forged Host headers to intercept valid reset tokens and take over administrator accounts.