CVE-2018-8715
23Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 23%
exploitation probability
23%top 2% of all CVEs
observed exploitation
nono source reports it
The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types.
Affected products
n/a · n/a