Lucene search

K
cvelistMitreCVELIST:CVE-2019-16645
HistorySep 20, 2019 - 6:24 p.m.

CVE-2019-16645

2019-09-2018:24:15
mitre
www.cve.org
3

AI Score

8.6

Confidence

High

EPSS

0.012

Percentile

85.5%

An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker. This could potentially be used in a phishing attack.

AI Score

8.6

Confidence

High

EPSS

0.012

Percentile

85.5%