Medium severity5.3NVD Advisory· Published Nov 22, 2019· Updated Jun 17, 2026
CVE-2019-19240
CVE-2019-19240
Description
Embedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header. The GoAhead WebsRedirect uses a static host buffer that has a limited length and can overflow. This can cause a copy of the Host header to fail, leaving that buffer uninitialized, which may leak uninitialized data in a response.
Affected products
3- Embedthis/GoAheaddescription
Patches
Vulnerability mechanics
References
3- github.com/embedthis/goahead/issues/289nvdExploitThird Party Advisory
- github.com/embedthis/goahead/issues/290nvdThird Party Advisory
- github.com/embedthis/goahead/releases/tag/v5.0.1nvdRelease Notes
News mentions
0No linked articles in our index yet.