description: invenio-app before 1.1.1 allows host header injection.
problem types: host header injection
affected:
{
product: invenio-app
vendor: Invenio
versions:
status: affected, version: < 1.1.1
}