Cesanta

Records155All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical27CVSS 9.0–10.0

CVSS high40CVSS 7.0–8.9

Exploited now

Cesanta records in CISA KEV

No Cesanta vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mjs 84 records HIGH Mongoose 55 records HIGH Mongoose Embedded Web Server Library 3 records MEDIUM Mongoose Os 2 records MEDIUM Mongooseos Mjs 1 record MEDIUM

Records

1 record in Mongooseos Mjs · all components

TI-2021-11866 CVE-2021-31875 · GHSA-gjqw-r32j-j6wq

In mjs_json.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can…

MEDIUM 46

In mjs_json.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjs_json_parse, which can potentially lead to redirection of control flow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02174 Published 2021-04-29 No fix listed CWE-193

Open these records in search →

Critical	27
High	40
Medium	88
Low	0
No CVSS	0