CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-11567

Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the authentication of users for requests that modify Mongoose.conf via a request to __mg_admin?save. NOTE: this issue can be leveraged to execute arbitrary code remotely.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 57.3%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.8

References

Products affected by CVE-2017-11567

Cesanta » Mongoose Embedded Web Server Library » Version: 3.2

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:3.2
Cesanta » Mongoose Embedded Web Server Library » Version: 3.3

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:3.3
Cesanta » Mongoose Embedded Web Server Library » Version: 3.4

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:3.4
Cesanta » Mongoose Embedded Web Server Library » Version: 3.5

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:3.5
Cesanta » Mongoose Embedded Web Server Library » Version: 3.6

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:3.6
Cesanta » Mongoose Embedded Web Server Library » Version: 3.7

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:3.7
Cesanta » Mongoose Embedded Web Server Library » Version: 3.8

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:3.8
Cesanta » Mongoose Embedded Web Server Library » Version: 4.0

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:4.0
Cesanta » Mongoose Embedded Web Server Library » Version: 4.1

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:4.1
Cesanta » Mongoose Embedded Web Server Library » Version: 5.0

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:5.0
Cesanta » Mongoose Embedded Web Server Library » Version: 5.1

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:5.1
Cesanta » Mongoose Embedded Web Server Library » Version: 5.2

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:5.2
Cesanta » Mongoose Embedded Web Server Library » Version: 5.3

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:5.3
Cesanta » Mongoose Embedded Web Server Library » Version: 5.4

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:5.4
Cesanta » Mongoose Embedded Web Server Library » Version: 5.5

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:5.5
Cesanta » Mongoose Embedded Web Server Library » Version: 5.5_20140120

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:5.5_20140120
Cesanta » Mongoose Embedded Web Server Library » Version: 5.6

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:5.6
Cesanta » Mongoose Embedded Web Server Library » Version: 6.0

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:6.0
Cesanta » Mongoose Embedded Web Server Library » Version: 6.1

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:6.1
Cesanta » Mongoose Embedded Web Server Library » Version: 6.2

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:6.2
Cesanta » Mongoose Embedded Web Server Library » Version: 6.3

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:6.3
Cesanta » Mongoose Embedded Web Server Library » Version: 6.4

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:6.4
Cesanta » Mongoose Embedded Web Server Library » Version: 6.5

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:6.5
Cesanta » Mongoose Embedded Web Server Library » Version: 6.6

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:6.6
Cesanta » Mongoose Embedded Web Server Library » Version: 6.7

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:6.7
Cesanta » Mongoose Embedded Web Server Library » Version: 6.8

cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:6.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-11567

Products

Pricing

Contact Us