Lucene search
+L

4 matches found

OSV
OSV
•added 2022/09/15 12:00 a.m.•74 views

GHSA-XV7R-9VQ4-9WRQ Project Wonder WebObjects vulnerable to Arbitrary HTTP Header Injection and Cross-site Scripting

Project Wonder WebObjects 1.0 through 7.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces. A patch for this issue is available at commit number b0d2d74f13203268ea254b02552600850f28014b...

6.1CVSS6.1AI score0.00668EPSS
SaveExploits1References5
NVD
NVD
•added 2022/09/14 9:15 p.m.•44 views

CVE-2022-37724

Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces...

6.1CVSS0.00668EPSS
SaveExploits1References2
OSV
OSV
•added 2022/09/14 8:25 p.m.•34 views

CVE-2022-37724

Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces...

6.2AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/14 12:00 a.m.•5 views

CVE-2022-37724: Improper Neutralization of Input During Web Page Generation

Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces...

6.1CVSS6.4AI score0.00668EPSS
SaveExploits1References2
Rows per page
Query Builder