Mongoose Embedded Web Server Library
Approved changes feed: RSS · Atom
cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cesanta (91223ef9-9be1-51ca-9999-b3190ce9965d) |
|---|---|
| Product | Mongoose Embedded Web Server Library (38c1f7e1-15d6-5359-814e-4a2db074483d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-20352 |
vulnerable | 2026-06-08 05:11:27.091909 |
Details available
Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Published: 2019-06-10T16:15:42.000Z
Updated: 2024-08-05T11:58:19.361Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7185 |
vulnerable | 2026-06-08 05:09:55.436561 |
Details available
Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a multipart/form-data POST request without a MIME boundary string.
Published: 2017-04-10T15:00:00.000Z
Updated: 2024-08-05T15:56:36.110Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11567 |
vulnerable | 2026-06-08 05:08:38.134848 |
Details available
Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the authentication of users for requests that modify Mongoose.conf via a request to __mg_admin?save. NOTE: this issue can be leveraged to execute arbitrary code remotely.
Published: 2017-09-07T13:00:00.000Z
Updated: 2024-08-05T18:12:40.338Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.