Improper Validation of User-Controlled HTTP Headers in COINS Construction Cloud 11.12 Allows for Arbitrary Website Redirection

CVE-2021-45226 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause it to send password-reset e-mails pointing to arbitrary websites.

Learn more about our Web App Pen Testing.