BO
Product
Boa
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 1Low 0
Watch
Add Boa to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43367 | 7.5 | Aug 15 | Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects Affected: through 0.16; through 0.19.0 |
| CVE-2021-33558 | 7.5 | May 27 | Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, log.html, email.html, online-users.html,… Affected: 0.94.13 |
| CVE-2018-21028 | 7.5 | Oct 11 | Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function Affected: through 0.94.14.21 |
| CVE-2017-9833 | 7.5 | Jun 24 | /cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root privileges Affected: 0.94.14.21 |
| CVE-2016-9564 | 7.5 | Nov 30 | Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters Affected: 0.92r |
Showing 5