Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-45956
5.3
MEDIUMCVSS v3
Published
December 12, 2022
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism.
gpg/boa
GitHubThe Boa web server. NOTE: Maintainers are not tracking this mirror. Do not make pull requests here, nor comment any commits, submit them usual way to bug tracker (https://www.gnupg.org/documentation/bts.html) or to the mailing list (https://www.gnupg.org/documentation/mailing-lists.html).
GitHubThe Boa web server. NOTE: Maintainers are not tracking this mirror. Do not make pull requests here, nor comment any commits, submit them usual way to bug tracker (https://www.gnupg.org/documentation/bts.html) or to the mailing list (https://www.gnupg.org/documentation/mailing-lists.html).= 0.94.13, = 0.94.14NVD