CVE-2014-9707
HIGH 7.5EPSS 28.2%
EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remote attackers to conduct directory traversal attacks, cause a denial of service (heap-based buffer overflow and crash), or possibly execute arbitrary code via a crafted URI.
- CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 28.24% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2015-03-31
- Updated
- 2024-08-06