Cesanta Mongoose Embedded Web Server Library
3 CVEs affecting Cesanta Mongoose Embedded Web Server Library. Latest disclosed: 2019-06-10. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20352 | High | 8.8 | 2019-06-10 | Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial o… |
CVE-2017-11567 | High | 8.8 | 2017-09-07 | Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the authentication of users for requests th… |
CVE-2017-7185 | High | 7.5 | 2017-04-10 | Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier… |