| Package | Affected versions | Patched versions |
|---|---|---|
| goahead | < 5.1.2 | 5.1.2 |
The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attacks. This allows an unauthenticated remote attacker to bypass authentication via capture-replay if TLS is not used to protect the underlying communication channel.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free