CVE-2017-14149

No fix known EPSS 6%

GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request.

Published 2017-09-05 · CVE record · OSV

Products: embedthis goahead