CVE-2017-14149

GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request...

CVE-2017-14149

GoAhead 3.4.0–3.6.5 is affected by a NULL pointer dereference in the websDecodeUrl function of http.c when handling a POST / HTTP/1.1 request, leading to a crash. The issue is confirmed across CVE records and vendor/security pages in the connected documents. Root cause: null pointer dereference i...