CVE-2022-44117

Description

References

• gist.github.com/yinfei6/20bd1d3ebe0803c2d8756ace3e173676 · Third Party Advisory

More vulnerabilities in boa

• CVE-2022-45956MEDIUM 5.3Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone t…
• CVE-2021-33558HIGH 7.5Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, l…
• CVE-2018-21028HIGH 7.5Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function.
• CVE-2018-21027CRITICAL 9.8Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition because malloc is mishandled.
• CVE-2017-9833HIGH 7.5/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root priv…