Vulnerabilities

TI-2018-14406 CVE-2018-20352 · GHSA-8fhm-6jq5-22c6

Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta…

MEDIUM 43

Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02725 Published 2019-06-10 No fix listed CWE-416

TI-2017-08561 CVE-2017-11567 · GHSA-r8jp-7x5w-h88v

Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows…

MEDIUM 45

Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the authentication of users for requests that modify Mongoose.conf via a request to __mg_admin?save.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.04135 Published 2017-09-07 No fix listed CWE-352

TI-2017-04881 CVE-2017-7185 · GHSA-r945-w37w-79vf

Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in…

MEDIUM 47

Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to ca…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.12251 Published 2017-04-10 No fix listed CWE-416

Vulnerabilities

Filters

Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta…

Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows…

Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in…