AdaCore/aws

AdaCore/aws

Releases54

Frequency4 months 3 weeks

Last Release 7 months ago

Stars158

AWS is a complete framework to develop Web based applications in Ada.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-41708 ↗	Sep 25, 2024Wednesday, 25 September 2024, 17:15	7.5 HIGH	—
An issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges and steal sessions via the Random_String() function in the src/core/aws-utils.adb module.
CVE-2024-37015 ↗	Aug 13, 2024Tuesday, 13 August 2024, 17:15	7.4 HIGH	—
An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers.