CVE-2017-14149

GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-09-05

Last modified

2024-09-16

Weaknesses

CWE-476

Affected products

• Goahead (Embedthis)

References

• https://github.com/shadow4u/goaheaddebug/blob/master/README.md