Xerox Workplace Suite Host Header Injection Vulnerability Allowing API Security Bypass

A vulnerability in Xerox Workplace Suite allows for an API security bypass by manipulating the Host header. This issue arises when the server fails to properly validate or trust the Host header, enabling an attacker to forge a value and gain unauthorized access to sensitive API endpoints. The vulnerability affects Xerox Workplace Suite versions prior to 5.6.701.9.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive API endpoints, potentially allowing attackers to interact with the API in ways that could compromise the application or its data.

Remediation

Users can upgrade to Xerox Workplace Suite version 5.6.701.9 to address this vulnerability.