SP
Vendor
Shellinabox Project
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2018-16789 | SH Shellinabox Shellinabox Project | 7.5 | Mar 17 | libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic |
| CVE-2015-8400 | SH Shellinabox Shellinabox Project | 7.4 | Jan 12 | The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL |