UbuntuUpdates.org

Bugs fixes in "yaws"

Origin Bug number Title Date fixed
CVE CVE-2020-24916 CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection. 2020-10-05
CVE CVE-2020-24379 WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection. 2020-10-05
CVE CVE-2020-24916 CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection. 2020-10-05
CVE CVE-2020-24379 WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection. 2020-10-05



About   -   Send Feedback to @ubuntu_updates