CVE-2022-37724

published 2022-09-14

CVE-2022-37724: Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
apple	webobjects	1.0 – 5.4.3	—

CWE-79