| Package | Affected versions | Patched versions |
|---|---|---|
| xcode | = 1.5= 2.2 | |
| xcode tools | = 1.0= 2.0= 2.1= 2.2.1= 2.3= 2.4= 2.4.1= 2.5≤ 3.0 |
The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free