| Title | TinyWebServer 1.0 Improper Authentication |
|---|
| Description | Improper Authentication found in http/http_conn.cpp:459-498 of TinyWebServer ≤ 1.0, the server do not check if user is authenticated, just compare the url user input and direct to a new page. In proper case, there should be a flag to identify whether user is authenticated. |
|---|
| Source | ⚠️ https://magnificent-dill-351.notion.site/Improper-Authentication-in-TinyWebServer-1-0-1c9c693918ed80cfa0f5db1a1d03c5e7 |
|---|
| User | s0l42 (UID 82389) |
|---|
| Submission | 04/02/2025 10:35 (1 Year ago) |
|---|
| Moderation | 04/04/2025 15:09 (2 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 303340 [qinguoyi TinyWebServer up to 1.0 http/http_conn.cpp m_url_real improper authentication] |
|---|
| Points | 15 |
|---|