GCVE - cpe:2.3:a:ok_web_server_project:ok_web

Approved changes feed: RSS · Atom

cpe:2.3:a:ok_web_server_project:ok_web_server:-:*:*:*:*:okcupid:*:*

part: a version: - update: *

Vendor	Ok Web Server Project (`49d0e0a3-0a2d-5b21-8905-5b6fa434845f`)
Product	Ok Web Server (`644d3a8d-73aa-5d1a-b130-2006d6d3b91f`)
Edition	*
Language	*
Software edition	*
Target software	okcupid
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/okcupid/okws`	purl2cpe	2026-06-01 10:16:03.094786

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3148`	vulnerable	2026-06-08 05:05:31.354120	Details available Cross-site scripting (XSS) vulnerability in libahttp/err.c in OkCupid OKWS (OK Web Server) allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to a non-existent page, which is not properly handled in a 404 error page. Published: 2015-08-31T18:00:00.000Z Updated: 2024-08-06T10:35:56.675Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/128338/OKCupid-Cross-Site-Scripting.html https://github.com/okws/okws/commit/e9bedb644d106a043e33e1058bedd1c2c0b2e2e0 https://twitter.com/infosecmaverick/status/462573038299803648 https://hackerone.com/reports/3317	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.