An issue was discovered in Embedthis GoA... CVE-2019-16645

5.0 AV AC AU C I A
发布: 2019-09-20
修订: 2019-10-10

An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker. This could potentially be used in a phishing attack.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息