Security Advisory
CVE-2018-8715
8.1
HIGH
Vulnerability Description
The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types.
Published Date
March 15, 2018
Official Source
NIST NVD Advisory