CVE-2018-8715: Embedthis Appweb

High severity, CVSS 8.1. EPSS: 22.8% chance of exploitation in the next 30 days.

The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types.

Affected products

• Embedthis Appweb: up to and including 7.0.2

Published 2018-03-15. Last modified 2026-06-17.