CVE-2021-26529

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 compiled with mbedTLS support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

A directory traversal vulnerability exists in the Cesanta Mongoose server.

Cesanta Mongoose is a suite of embedded servers from Cesanta, Ireland. A directory traversal vulnerability exists in the Cesanta Mongoose server, which can be exploited by an attacker to obtain directory information...