CVE-2023-50965

2023-12-1700:00:00

mitre

www.cve.org

microhttpserver

buffer overflow

remote code execution

long uri

AI Score

Confidence

High

EPSS

0.003

Percentile

69.0%

JSON

In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI.

References

github.com/starnight/MicroHttpServer/issues/5

github.com/starnight/MicroHttpServer/tree/43985708ef5fe7677392c54e229bd22e136c2665