Description

Improper header parsing may lead to request smuggling has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to access restricted resources managed by Hiawatha webserver.

Remediation

References

CVE-2025-57783

Related Vulnerabilities

Lighttpd Out-of-bounds Write Vulnerability (CVE-2022-22707)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-3558)

PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-20001)

PHP Use After Free Vulnerability (CVE-2017-12934)

Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2026-5766)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CVE-2025-57783