CVE-2024-55925

creationtimestamp| type| source ---|---|--- 2025-01-23 17:10:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113878776319408571 2025-01-23 17:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf3okzl22j 2025-01-23 17:40:06+00:00| seen|...

CVE-2024-55925 API Security bypass through header manipulation

In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header. If the server improperly validates or trusts the Host header without verifying the actual destination, an attacker can forge a value to gain unauthorized access. This exploit targets...

CVE-2024-55925 API Security bypass through header manipulation

In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header. If the server improperly validates or trusts the Host header without verifying the actual destination, an attacker can forge a value to gain unauthorized access. This exploit targets...