CVE-2019-16645

An issue was discovered in Embedthis GoAhead 2.5.0

published September 20, 2019

CVSS
—
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker. This could potentially be used in a phishing attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08183 · 94.8th percentile
Published
2019-09-20T18:24Z
EPSS history
Timeline
  • 20 SEP 18:24Z
    An issue was discovered in Embedthis GoAhead 2.5.0
    cvelistv5