CVE-2022-40870

HIGH Year: 2022
CVSS v3 Score
8.1
High
Weakness Type
CWE-116
View all →

Vulnerability Description

The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload injected into the Host header.

Related Vulnerabilities

CVE-2020-26226

HIGH
CVSS:8.1(High)

In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by `semantic-release` can be accidentally disclosed if they contain characters that become encoded when...

CWE-1162020

CVE-2021-23205

HIGH
CVSS:8.1(High)

Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware items beyond their privilege. This issue ...

CWE-1162021

CVE-2024-38473

HIGH
CVSS:8.1(High)

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requ...

CWE-1162024

CVE-2024-38474

HIGH
CVSS:8.1(High)

Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any U...

CWE-1162024

CVE-2023-45135

HIGH
CVSS:8.0(High)

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In `org.xwiki.platform:xwiki-platform-web` versions 7.2-milestone-2 until 14.10.12 and `org.xwi...

CWE-1162023

CVE-2023-45539

HIGH
CVSS:8.2(High)

HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end ru...

CWE-1162023