ME
Product
Mongoose Embedded Web Server Library
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch
Add Mongoose Embedded Web Server Library to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-20352 | 8.8 | Jun 10 | Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service… Affected: through 6.13 |
| CVE-2017-11567 | 8.8 | Sep 7 | Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the authentication of users for requests that modify… Affected: through 6.8 |
| CVE-2017-7185 | 7.5 | Apr 10 | Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2… Affected: through 6.7 |
Showing 3