Approved changes feed: RSS · Atom

cpe:2.3:a:boa:boa_webserver:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBoa (eb46df32-9ab8-5874-8c4d-5e73ba5144d0)
ProductBoa Webserver (c0ce9af6-1e12-5190-a949-0239dd7df7fb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gpg/boa purl2cpe 2026-06-01 10:16:13.302701

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47916 vulnerable 2026-06-08 06:48:13.441660 Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
HIGH (7.5)
Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2024-11-14T10:00:23.334Z
Updated: 2024-11-14T19:34:34.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0920 vulnerable 2026-06-08 04:45:18.978034 Details available
Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "."
Published: 2001-01-22T05:00:00.000Z
Updated: 2024-08-08T05:37:32.006Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.