CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It affects Java.
CVE
CVE-2024-42330
Severity
CRITICAL
CVSS
9.1
EPSS
0.95%
Java
Original NVD Description
The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.
Related CVEs
Other vulnerabilities affecting the same vendor(s)