Vulnerabilities (CVE)

Filtered by vendor Cesanta Subscribe
Filtered by product Mongoose Os
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-7185 1 Cesanta 2 Mongoose Embedded Web Server Library, Mongoose Os 2018-10-09 5.0 MEDIUM 7.5 HIGH
Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a multipart/form-data POST request without a MIME boundary string.