CVE-2019-5097 Vulnerability Details

  /     /     /  

CVE-2019-5097 Metadata Quick Info

CVE Published: 03/12/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: talos | Vendor: n/a | Product: EmbedThis
Status : PUBLISHED

---

CVE-2019-5097 Description

A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web server application in versions v5.0.1, v.4.1.1 and v3.6.5. A specially crafted HTTP request can lead to an infinite loop in the process. The request can be unauthenticated in the form of GET or POST requests and does not require the requested resource to exist on the server.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-835
CWE Name: CWE-835: Loop with Unreachable Exit Condition ( Infinite Loop )
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).