漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
goshs route not protected, allows command execution
Vulnerability Description
goshs is a SimpleHTTPServer written in Go. Starting in version 0.3.4 and prior to version 1.0.5, running goshs without arguments makes it possible for anyone to execute commands on the server. The function `dispatchReadPump` does not checks the option cli `-c`, thus allowing anyone to execute arbitrary command through the use of websockets. Version 1.0.5 fixes the issue.
CVSS Information
N/A
Vulnerability Type
访问控制不恰当
Vulnerability Title
goshs 访问控制错误漏洞
Vulnerability Description
goshs是Patrick Hener个人开发者的一个用Go编写的简单HTTP Server。 goshs 1.0.5之前版本存在访问控制错误漏洞，该漏洞源于未检查cli选项-c，可能导致任意命令执行。
CVSS Information
N/A
Vulnerability Type
N/A