high8.1
CVE-2022-40870
The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks.
Impact
The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload injected into the Host header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Parallels | Remote Application Server | Version 18.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/IthacaLabs/Parallels/blob/main/ParallelsRemoteApplicationServer/HHI_CVE-2022-40870.txt
- https://github.com/IthacaLabs/Parallels/tree/main/ParallelsRemoteApplicationServer
- https://github.com/IthacaLabs/Parallels/blob/main/ParallelsRemoteApplicationServer/HHI_CVE-2022-40870.txt
- https://github.com/IthacaLabs/Parallels/tree/main/ParallelsRemoteApplicationServer