cpp-httplib vulnerabilities (openSUSE)
15 vulnerabilities.
-
cpp-httplibopenSUSE cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection 9.9 Critical -
cpp-httplibopenSUSE cpp-httplib: Malicious `X-Forwarded-For` Under Trusted-Proxy Configuration Triggers Empty `vector::front()`, Leading to Undefined Behavior and Server Crash 8.7 High -
cpp-httplibopenSUSE cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body 4.8 Medium -
cpp-httplibopenSUSE cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect 7.4 High -
cpp-httplibopenSUSE cpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxy 8.7 High -
cpp-httplibopenSUSE cpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsing 5.9 Medium -
cpp-httplibopenSUSE Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies in cpp-httplib 7.5 High -
cpp-httplibopenSUSE cpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header 5.3 Medium -
cpp-httplibopenSUSE cpp-httplib vulnerable to a denial of service (DOS) using a zip bomb 8.7 High -
cpp-httplibopenSUSE cpp-httplib has CRLF injection in http headers 7.7 High -
cpp-httplibopenSUSE cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust 5.3 Medium -
cpp-httplibopenSUSE cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*) 10.0 Critical -
cpp-httplibopenSUSE cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability 7.5 High -
cpp-httplibopenSUSE cpp-httplib does not limit the length of a line 6.3 Medium -
cpp-httplibopenSUSE cpp-httplib has Unbounded Memory Allocation in Chunked/No-Length Requests 7.5 High