Hiawatha Webserver
CVE-2025-57785
MEDIUM
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
A Double Free in XSLT show_index has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to corrupt data which may lead to arbitrary code execution.
AnalysisAI
Hiawatha Webserver versions up to 11.7 contains a vulnerability that allows attackers to arbitrary code execution (CVSS 6.5).
Technical ContextAI
affects Hiawatha Webserver. A Double Free in XSLT show_index has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to corrupt data which may lead to arbitrary code execution.
RemediationAI
Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.
More in Hiawatha Webserver
View allIn Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled. Rated high s
Hiawatha versions up to 11.7 contains a vulnerability that allows attackers to request smuggling has been identified in
Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows
Same weakness CWE-415 – Double Free
View allShare
External POC / Exploit Code
Leaving vuln.today