CVE-2021-44550

CVE-2021-44550 corresponds to an Incorrect Access Control vulnerability in Stanford CoreNLP 4.3.2, exposed via the NERServlet classifier. The issue enables HTTP header injection by not properly validating or escaping the classifier header, allowing a remote attacker to craft requests that inject ...