Количество 2
Количество 2
CVE-2026-64863
goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.
GHSA-hq33-8jgp-8qq3
goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-64863 goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4. | CVSS3: 9.1 | 0% Низкий | 11 дней назад |
| GHSA-hq33-8jgp-8qq3 goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite | CVSS3: 9.1 | 0% Низкий | 11 дней назад |
Уязвимостей на страницу