CVE-2014-9707
CVSS Score Not Available
60.59%
MEDIUM RiskEPSS (98th percentile)
EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remote attackers to conduct directory traversal attacks, cause a denial of service (heap-based buffer overflow and crash), or possibly execute arbitrary code via a crafted URI.
Published: 3/31/2015
Modified: 4/12/2025
Vulnerability Summary
EPSS Score (Exploitation Probability)
60.59%MEDIUM Exploitation Risk
98th percentile
This vulnerability has a 60.59% probability of being exploited in the next 30 days, ranking higher than 98% of all scored CVEs.