Unbit

Uwsgi

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-27522

  • EPSS 0.7%
  • Published 07.03.2023 16:15:09
  • Last modified 01.05.2025 15:34:19

HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the cli...

7.5

CVE-2018-7490

  • EPSS 94.11%
  • Published 26.02.2018 22:29:00
  • Last modified 21.11.2024 04:12:13

uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

9.8

CVE-2018-6758

  • EPSS 0.55%
  • Published 06.02.2018 18:29:00
  • Last modified 21.11.2024 04:11:08

The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length.