Description
Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact range. This may result in a NULL pointer dereference and cause a denial of service.
Unscored
CVE-2020-15689
EUVD-2020-7676GHSA-vr4r-jm4f-grc9
Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact r…
Published Jul 13, 2020 · Updated Aug 4, 2024 · Assigned by mitre