Cherokee Code Issue Vulnerability

Cherokee is an open source web server. A security vulnerability exists in Cherokee versions 0.4.27 through 1.2.104. A remote attacker can exploit this vulnerability to cause the server to crash denial of service with a specially crafted HTTP request...

PT-2020-13290 · Alvaro Lopez Ortega · Cherokee

Name of the Vulnerable Software and Affected Versions: Cherokee versions 0.4.27 through 1.2.104 Description: The issue is a denial of service caused by NULL pointer dereferences. A remote unauthenticated attacker can crash the server by sending an HTTP request to protected resources using a...

PT-2020-10768 · Cherokee · Cherokee

Name of the Vulnerable Software and Affected Versions: Cherokee versions 1.2.104 and earlier Description: A cross-site scripting XSS issue was discovered in the handler server info.c file. The requested URL is improperly displayed on the About page in the default configuration of the web server a...