Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-66570

Опубликовано: 05 дек. 2025
Источник: nvd
CVSS3: 10
CVSS3: 9.8
EPSS Низкий

Описание

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTE_ADDR, REMOTE_PORT, LOCAL_ADDR, LOCAL_PORT that are parsed into the request header multimap via read_headers() in httplib.h (headers.emplace), then the server later appends its own internal metadata using the same header names in Server::process_request without erasing duplicates. Because Request::get_header_value returns the first entry for a header key (id == 0) and the client-supplied headers are parsed before server-inserted headers, downstream code that uses these header names may inadvertently use attacker-controlled values. Affected files/locations: cpp-httplib/httplib.h (read_headers, Server::process_request, Request::get_header_value, get_header_value_u64) and cpp-httplib/docker/main.cc (get_client_ip, nginx

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:yhirose:cpp-httplib:*:*:*:*:*:*:*:*
Версия до 0.27.0 (исключая)

EPSS

Процентиль: 12%
0.00041
Низкий

10 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 10
ubuntu
2 месяца назад

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTE_ADDR, REMOTE_PORT, LOCAL_ADDR, LOCAL_PORT that are parsed into the request header multimap via read_headers() in httplib.h (headers.emplace), then the server later appends its own internal metadata using the same header names in Server::process_request without erasing duplicates. Because Request::get_header_value returns the first entry for a header key (id == 0) and the client-supplied headers are parsed before server-inserted headers, downstream code that uses these header names may inadvertently use attacker-controlled values. Affected files/locations: cpp-httplib/httplib.h (read_headers, Server::process_request, Request::get_header_value, get_header_value_u64) and cpp-httplib/docker/main.cc (get_client_ip, ng...

CVSS3: 10
debian
2 месяца назад

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTT ...

suse-cvrf
23 дня назад

Security update for cpp-httplib

EPSS

Процентиль: 12%
0.00041
Низкий

10 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-290