CVE-2022-45956

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Dec 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-459577.5ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow.CVE-2022-45965.4A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the filCVE-2022-459626.5Open Solutions for Education, Inc openSIS Community Edition v8.0 and earlier is vulnerable to SQL Injection via CalendarModal.php.CVE-2022-459639.8h3c firewall <= 3.10 ESS6703 has a privilege bypass vulnerability.CVE-2022-459669.8here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5.CVE-2022-459688.8Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (even a password protecCVE-2022-459699.8Alist v3.4.0 is vulnerable to Directory Traversal,CVE-2022-45975.4A vulnerability, which was classified as problematic, was found in Shoplazza LifeStyle 1.1. Affected is an unknown function of the file /admCVE-2022-459705.4Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.CVE-2022-459778.8Tenda AX12 V22.03.01.21_CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function.CVE-2022-459797.5Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the ssid parameter at /goform/fast_setting_wifi_set .CVE-2022-45985.4A vulnerability has been found in Shoplazza LifeStyle 1.1 and classified as problematic. Affected by this vulnerability is an unknown functi