CVE-2008-2318
The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local...
The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs.
Exploit likelihood
What each source reports
NVD Score used
The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs.
- Record
CVE-2008-2318- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs.
- Record
CVE-2008-2318- Updated
- 2026-11-02
EUVDEUVD-2008-2314 No score
The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs.
- Record
EUVD-2008-2314- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j5gp-2w8h-r25r No score
The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local...
The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs.
- Record
GHSA-j5gp-2w8h-r25r- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2318 is a medium vulnerability (CVSS 5.0) in Apple Xcode, published July 14, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/43735
securitytracker.com/id?1020473
securityfocus.com/bid/30191
lists.apple.com/archives/security-announce//2008/Jul/msg00002.html
support.apple.com/kb/HT2352
vupen.com/english/advisories/2008/2093/references
secunia.com/advisories/31060
nvd.nist.gov/vuln/detail/CVE-2008-2318
github.com/advisories/GHSA-j5gp-2w8h-r25r