Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information Disclosure via a crafted SSI file.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-125,CWE-200,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| civetweb_project | civetweb | * |