← Database

CVE-2022-40870

HIGH CVSS: 8.1 Published: 2022-11-23 Modified: 2026-06-17

Description

The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload injected into the Host header.

Affected Platforms

Parallels Remote Application Server

Weakness Type

CWE-116, CWE-116

References