drogonframework/drogon

drogonframework/drogon

Releases65

Frequency1 month 1 week

Last Release 29 days ago

Stars13.9K

Drogon: A C++14/17/20 based HTTP web application framework running on Linux/macOS/Unix/Windows

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-3959 ↗	Nov 11, 2022Friday, 11 November 2022, 16:15	3.1 LOW	—
A vulnerability, which was classified as problematic, has been found in drogon up to 1.8.1. Affected by this issue is some unknown functionality of the component Session Hash Handler. The manipulation leads to small space of random values. The attack may be launched remotely. Upgrading to version 1.8.2 is able to address this issue. The name of the patch is c0d48da99f66aaada17bcd28b07741cac8697647. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213464.
CVE-2022-25297 ↗	Feb 21, 2022Monday, 21 February 2022, 08:15	7.5 HIGH	6.5 MEDIUM
This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save() method may enable attackers to write files to arbitrary locations outside the designated target folder.