| Package | Affected versions | Patched versions |
|---|---|---|
| appweb | < 7.0.2 | 7.0.2 |
| goahead | < 4.0.1 | 4.0.1 |
An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a specially crafted "Host" header field may cause a NULL pointer dereference and thus cause a denial of service, as demonstrated by the lack of a trailing ']' character in an IPv6 address.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free