| Package | Affected versions | Patched versions |
|---|---|---|
| appweb | ≤ 7.0.2 |
The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free