EmbedThis GoAhead

• CVE-2023-53155 High 7.2 goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter. 0.6%
• CVE-2024-3187 Medium 5.9 This issue tracks two CWE-416 Use After Free (UAF) and one CWE-415 Double Free vulnerabilities in Goahead versions <= 6.0.0. These are caused by JST values not being nulled when freed during parsing o 0.5%
• CVE-2024-3186 Medium 5.3 CWE-476 NULL Pointer Dereference vulnerability in the evalExpr() function of GoAhead Web Server (version <= 6.0.0) when compiled with the ME_GOAHEAD_JAVASCRIPT flag. This vulnerability allows a remote 0.5%
• CVE-2024-3184 Medium 5.9 Multiple CWE-476 NULL Pointer Dereference vulnerabilities were found in GoAhead Web Server up to version 6.0.0 when compiled with the ME_GOAHEAD_REPLACE_MALLOC flag. Without a memory notifier for allo 0.5%
• CVE-2021-43298 Unrated The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time memcmp and has no rate-limiting. This means that an unauthenticated network attacker can br 2.3%