yaws vulnerabilities (Ubuntu)
5 vulnerabilities.
-
yawsUbuntu CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection. 9.8 Critical -
yawsUbuntu WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection. 9.8 Critical -
yawsUbuntu yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by... 5.5 Medium -
yawsUbuntu yaws before 2.0.4 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and... 6.1 Medium -
yawsUbuntu Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might... 5.0 Medium