CVE-2017-1000471

概要

参考情報

• embedthis/goahead commit 5e6be61 · Patch
• embedthis/goahead#258 · Issue Tracking

goahead のその他の脆弱性

• CVE-2021-41615緊急 9.8websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinpara…
• CVE-2021-43298緊急 9.8The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time memcmp and has no rate-limiting…
• CVE-2021-42342緊急 9.8An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts wit…
• CVE-2020-15688高 8.8The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attacks. This allows an una…
• CVE-2019-5097高 7.5A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web server application in ve…