CVE-2020-24916

Description

References

• erlyaws/yaws · Patch
• vulnbe/poc-yaws-cgi-shell-injection · Exploit
• lists.debian.org/debian-lts-announce/2020/09/msg00022.html · Mailing List
• packetstormsecurity.com/files/159106/Yaws-2.0.7-XML-Injection-Command-Injection.html · Exploit
• usn.ubuntu.com/4569-1 · Third Party Advisory
• vuln.be/post/yaws-xxe-and-shell-injections · Exploit
• debian.org/security/2020/dsa-4773 · Third Party Advisory

Altre vulnerabilità di yaws

• CVE-2020-24379CRITICO 9.8WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.
• CVE-2020-12872MEDIO 5.5yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if runnin…
• CVE-2016-1000108MEDIO 6.1yaws before 2.0.4 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications fr…
• CVE-2011-4350MEDIO 6.5Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to …
• CVE-2017-10974ALTO 7.5Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only about…