embedthis vulnerabilities

5 published CVEs name embedthis among the affected products.

Critical 1High 1Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2023-53155
goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter.
EmbedThis · GoAhead
High7.2
CVE-2024-3187
This issue tracks two CWE-416 Use After Free (UAF) and one CWE-415 Double Free vulnerabilities in Goahead versions <= 6.0.0. These are caused by JST values not…
EmbedThis · GoAhead
Medium5.9
CVE-2024-3186
CWE-476 NULL Pointer Dereference vulnerability in the evalExpr() function of GoAhead Web Server (version <= 6.0.0) when compiled with the ME_GOAHEAD_JAVASCRIPT…
EmbedThis · GoAhead
Medium5.3
CVE-2024-3184
Multiple CWE-476 NULL Pointer Dereference vulnerabilities were found in GoAhead Web Server up to version 6.0.0 when compiled with the ME_GOAHEAD_REPLACE_MALLOC…
EmbedThis · GoAhead
Medium5.9
CVE-2021-43298
The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time memcmp and has no rate-limiting. This means that…
embedthis · goahead
Critical9.8