high7.5
CVE-2017-14149
GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request.
Impact
GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Embedthis | Goahead | Versions 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5 |