Shellinabox Project Shellinabox
2 CVEs affecting Shellinabox Project Shellinabox. Latest disclosed: 2019-03-21. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-16789 | High | 7.5 | 2019-03-21 | libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic. By sending a crafted multipart/form-data HTTP request… |
CVE-2015-8400 | High | 7.4 | 2016-01-12 | The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the… |