CVE-2022-45956

PoC —

CVSS 3.1

5.3 medium

EPSS

<1%p55

Published

Dec 12, 2022 (Dec 12, 2022)

Modified

Jun 17, 2026

Description

Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism.

Vendors: boa
Products: boa
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.