VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 3, 2019· Updated Jun 17, 2026

CVE-2019-5097

CVE-2019-5097

Description

A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web server application in versions v5.0.1, v.4.1.1 and v3.6.5. A specially crafted HTTP request can lead to an infinite loop in the process. The request can be unauthenticated in the form of GET or POST requests and does not require the requested resource to exist on the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Embedthis/Goahead3 versions
    cpe:2.3:a:embedthis:goahead:3.6.5:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:embedthis:goahead:3.6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:embedthis:goahead:4.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:embedthis:goahead:5.0.1:*:*:*:*:*:*:*
  • GoAhead/GoAhead web server applicationdescription
  • Goahead/GoAheadllm-fuzzy
    Range: v5.0.1, v.4.1.1, v3.6.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.