CVE-2020-24916
CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.
- Обновитесь до 2.0.4+dfsg-2ubuntu0.1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости yaws
За последние 30 дней в yaws опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 4
CVE-2020-24379
WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.
- Обновитесь до 2.0.4+dfsg-2ubuntu0.1
Опубликовано ОбновленоCVE-2020-12872
yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an Erlang/OTP virtual machine with a version less than 21.0.
Опубликовано ОбновленоCVE-2009-4495
Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.