CVE-2022-45956: Boa

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism.

Affected products

• Boa Boa: version 0.94.13 only; version 0.94.14 only

Published 2022-12-12. Last modified 2026-06-17.