CVE-2020-15688

概要

参考情報

• packetstormsecurity.com/files/159505/EmbedThis-GoAhead-Web-Server-5.1.1-Digest-Authentication-Capture-Replay-Nonce-Reuse.html · Exploit
• embedthis/goahead-gpl · Third Party Advisory

goahead のその他の脆弱性

• CVE-2021-41615緊急 9.8websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinpara…
• CVE-2021-43298緊急 9.8The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time memcmp and has no rate-limiting…
• CVE-2021-42342緊急 9.8An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts wit…
• CVE-2019-5097高 7.5A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web server application in ve…
• CVE-2019-5096緊急 9.8An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server app…