CVE-2024-3186mediumCWE-476

CVE-2024-3186: medium-severity vulnerability in EmbedThis GoAhead

Published

Follow this CVE+ Monitor GoAhead

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.5%
CWE-476 NULL Pointer Dereference vulnerability in the evalExpr() function of GoAhead Web Server (version <= 6.0.0) when compiled with the ME_GOAHEAD_JAVASCRIPT flag. This vulnerability allows a remote attacker with the privileges to modify JavaScript template (JST) files to trigger a crash and cause a Denial of Service (DoS) by providing malicious templates.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
EmbedThis · GoAhead
Related CVEs — EmbedThis GoAhead

In the same product, most dangerous first.

CVE-2023-53155HIGHCVE-2023-53155EPSS 0.6%CVE-2024-3187MEDIUMCVE-2024-3187EPSS 0.5%CVE-2024-3184MEDIUMCVE-2024-3184EPSS 0.5%