CVE-2019-19240
PoC —CVSS 3.1
5.3 medium
EPSS
2%p74
Published
()
Modified
Description
Embedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header. The GoAhead WebsRedirect uses a static host buffer that has a limited length and can overflow. This can cause a copy of the Host header to fail, leaving that buffer uninitialized, which may leak uninitialized data in a response.
- Vendors
- embedthis
- Products
- goahead
- Weakness
- CWE-787, CWE-908
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.