VDB
CVE-2025-55763
CVE-2025-55763
PUBLISHED
CVSS 7.5 HIGH
Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a crafted HTTP request. This vulnerability is triggered during request processing and may allow an attacker to corrupt heap memory, potentially leading to denial of service or arbitrary code execution.
EPSS 1.19% · 65.8th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.19%
65.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| civetweb_project | civetweb | 1.14 |
| n/a | n/a | n/a |
Timeline
- Aug 29, 2025 CVE Published
- Aug 29, 2025 CVE Updated
- Aug 30, 2025 EPSS Score
- Aug 31, 2025 PoC Published
- Sep 1, 2025 Coalition ESS Score
- Sep 2, 2025 Coalition ESS Score
- Sep 7, 2025 EPSS Score
- Sep 9, 2025 Coalition ESS Score
- Sep 15, 2025 EPSS Score
- Sep 23, 2025 EPSS Score
- Sep 27, 2025 Coalition ESS Score
- Oct 3, 2025 EPSS Score