Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
unbit uwsgi vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-27522
HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 up to and including 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client.
Apache Http Server
Debian Debian Linux 10.0
Unbit Uwsgi
5
CVSSv2
CVE-2018-7490
uWSGI prior to 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.
Unbit Uwsgi
Debian Debian Linux 8.0
Debian Debian Linux 9.0
1 EDB exploit
1 Github repository
7.5
CVSSv2
CVE-2018-6758
The uwsgi_expand_path function in core/utils.c in Unbit uWSGI up to and including 2.0.15 has a stack-based buffer overflow via a large directory length.
Unbit Uwsgi
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started