| Package | Affected versions | Patched versions |
|---|---|---|
| appweb | ≥ 5.0.0, < 5.2.1< 4.6.6 | 5.2.14.6.6 |
| enterprise communications broker | ≤ 2.0.0 |
Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free