CVE-2022-45956

Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism.

CVSS v3.1 NVD

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.85% chance of exploitation in the next 30 days, 58th percentile

Published

2022-12-12

Updated

2025-04-22

Proof-of-concept exploits (1)

• https://packetstormsecurity.com/files/169962/Boa-Web-Server-0.94.13-0.94.14-Authenticatio…

References

• CVE Record
• NVD entry