Описание
(Mongoose is an embedded web server and network library. Prior to 7.22, ...)
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needs-triage | |
| jammy | DNE | |
| noble | DNE | |
| resolute | DNE | |
| upstream | needs-triage |
Показывать по
10
Ссылки на источники
6.5 Medium
CVSS3
Связанные уязвимости
CVSS3: 6.5
nvd
8 дней назад
Mongoose is an embedded web server and network library. Prior to 7.22, an attacker who can control an SSI-enabled file can place directory traversal sequences in an #include file or #include virtual directive. The mg_ssi() function in src/ssi.c concatenates the directive argument into a filesystem path without calling mg_path_is_sane(), allowing an MG_ENABLE_SSI deployment with ssi_pattern configured to disclose files readable by the Mongoose process. This issue is fixed in version 7.22.
CVSS3: 6.5
debian
8 дней назад
Mongoose is an embedded web server and network library. Prior to 7.22, ...
6.5 Medium
CVSS3