CVE-2005-0316: Webwasher Classic

High severity, CVSS 7.5. EPSS: 8.2% chance of exploitation in the next 30 days.

WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.

Affected products

• Webwasher Webwasher Classic: version 2.2.1 only; version 3.3 only

Published 2005-01-28. Last modified 2026-06-16.