5 matches found
CVE-2026-19352
CVE-2026-19352 affects mifi lossless-cut (up to 3.69.0) in the Built-in HTTP API Service, specifically the file src/main/httpServer.ts. The issue enables server-side request forgery (SSRF) when a manipulated request is processed, requiring access to the local network. Exploit complexity is descri...
EUVD-2026-54920
A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the...
CVE-2023-50044
Cesanta MJS 2.20.0 has a getpropbuiltinforeign out-of-bounds read if a Built-in API name occurs in a substring of an input string...