VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 3, 2019· Updated Aug 4, 2024

CVE-2019-5097

CVE-2019-5097

Description

A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web server application in versions v5.0.1, v.4.1.1 and v3.6.5. A specially crafted HTTP request can lead to an infinite loop in the process. The request can be unauthenticated in the form of GET or POST requests and does not require the requested resource to exist on the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • GoAhead/GoAhead web server applicationdescription
  • Embedthis/Goaheadllm-fuzzy
    Range: v5.0.1, v4.1.1, v3.6.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.