CVE-2022-38668

Mô tả

Tham khảo

• 0xhebi/CVEs · Exploit
• CrowCpp/Crow#523 · Third Party Advisory
• gynvael.coldwind.pl · Exploit

Lỗ hổng khác của crow

• CVE-2023-26142TRUNG BÌNH 6.1All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values. Header …
• CVE-2022-38667NGHIÊM TRỌNG 9.8HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used. The HTTP…
• CVE-2022-34970NGHIÊM TRỌNG 9.8Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitation this vulnerabilit…
• CVE-2021-23824TRUNG BÌNH 6.1This affects the package Crow before 0.3+4. When using attributes without quotes in the template, an attacker can manipulate the input to in…
• CVE-2021-23514CAO 7.5This affects the package Crow before 0.3+4. It is possible to traverse directories to fetch arbitrary files from the server.