mochiweb vulnerabilities and fixes

Recent CVEs affecting mochiweb, with upgrade or downgrade steps. 1 tracked.

mochiweb has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2014-03-18. Highest priority: CVE-2012-5641 (score 51/100).

• CVE-2012-5641 MEDIUM 5.0 UPGRADE UPGRADE Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before 2.4.0, as

FAQ

How do I fix mochiweb vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mochiweb being exploited right now?

None of the tracked mochiweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mochiweb CVE should I patch first?

CVE-2012-5641 currently ranks highest (51/100): Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before 2.4.0, as.

← Back to latest CVEs