CVE-2022-34970

The CVE-2022-34970 entry affects Crow v1.0+4 and is caused by a heap-based overflow in the qs_parse function of query_string.h. On successful exploitation, remote code execution in the context of the vulnerable Crow service is possible. The Red Hat and OSV/NVD entries corroborate this description...

CVE-2021-23824

The CVE-2021-23824 entry concerns Crow (C/C++ micro-framework). Concrete details across connected sources show thatCrow before 0.3+4 is vulnerable when rendering templates that interpolate attributes without quotes; an attacker can inject attributes to manipulate input, enabling Cross‑site Script...

CVE-2021-23514

CVE-2021-23514 affects Crow before 0.3+4. A path traversal flaw allows an attacker to traverse directories and fetch arbitrary files from the server via supported endpoints. The vulnerability is described across multiple sources (e.g., NVD/CVE entry; CNVD/CNNVD; Snyk references) as a directory tr...