High severity7.1OSV Advisory· Published Jun 22, 2018· Updated Jun 17, 2026
CVE-2018-12684
CVE-2018-12684
Description
Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information Disclosure via a crafted SSI file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=1.10+ 2 more
- (no CPE)range: <=1.10
- (no CPE)range: v1.10, v1.5, v1.6, …
- cpe:2.3:a:civetweb_project:civetweb:*:*:*:*:*:*:*:*range: <=1.10
Patches
Vulnerability mechanics
References
2- github.com/civetweb/civetweb/commit/8fd069f6dedb064339f1091069ac96f3f8bdb552nvdPatchThird Party Advisory
- github.com/civetweb/civetweb/issues/633nvdThird Party Advisory
News mentions
0No linked articles in our index yet.