CVE-2022-37724
1 advisory.
Maven/wonder:wonder CVE-2022-37724: medium 6.1, EPSS 0.67%
Project Wonder WebObjects vulnerable to Arbitrary HTTP Header Injection and Cross-site Scripting
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0 | - | 7.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-xv7r-9vq4-9wrq
- https://nvd.nist.gov/vuln/detail/CVE-2022-37724
- https://github.com/wocommunity/wonder/pull/992
- https://github.com/wocommunity/wonder/commit/b0d2d74f13203268ea254b02552600850f28014b
- https://github.com/wocommunity/wonder
- https://xmit.xyz/security/webobjects-url-tomfoolery
CVE-2022-37724 · published · modified · JSON