Vulnerabilities > Cesanta > Mongoose OS > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-04-10 CVE-2017-7185 Use After Free vulnerability in Cesanta Mongoose Embedded web Server Library and Mongoose OS
Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a multipart/form-data POST request without a MIME boundary string.
network
low complexity
cesanta CWE-416
5.0