Arbitrary HTTP Header Injection & XSS in Project Wonder WebObjects 1.0-5.4.3
CVE-2022-37724 Published on September 14, 2022

Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces.

NVD


Products Associated with CVE-2022-37724

Want to know whenever a new CVE is published for Apple Webobjects? stack.watch will email you.

Apple Webobjects
 

Exploit Probability

EPSS
0.27%
Percentile
50.37%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.