Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2026/03/04 7:34 p.m.•45 views

CVE-2026-28434 cpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via setexceptionhandler, the library catches the exception and writes its message...

5.3CVSS0.00409EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/04 12:00 a.m.•1 views

CVE-2026-28434: Exposure of Sensitive Information to an Unauthorized Actor

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via setexceptionhandler, the library catches the exception and writes its message...

5.3CVSS5.6AI score0.00409EPSS
SaveExploits1References1
Rows per page
Query Builder