CVE-2022-23079
motoradmin - host header Injection in the reset password functionality
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.
Exploit likelihood
What each source reports
NVD Score used
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.
- Record
CVE-2022-23079- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-116
- Updated
- 2026-11-02
CVE List No score
motoradmin - host header Injection in the reset password functionality
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.
- Record
CVE-2022-23079- Weakness
- CWE-116
- Updated
- 2026-11-02
EUVDEUVD-2022-28186 No score
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.
- Record
EUVD-2022-28186- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-84f2-hxx8-45mv
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the...
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.
- Record
GHSA-84f2-hxx8-45mv- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-116
- Updated
- 2026-11-02
OSV No score
motoradmin - host header Injection in the reset password functionality
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.
- Record
CVE-2022-23079- Weakness
- CWE-116
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-23079 is a medium vulnerability (CVSS 6.8) in Motor-admin, published June 22, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.38%, the 72nd percentile. No source names a fixed version.