Skip to content

Vendor

org.nanohttpd vulnerabilities

1 published CVE affecting org.nanohttpd, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.nanohttpd alerts

Products

Latest org.nanohttpd CVEs

Newest publication first

  1. CVE-2020-13697 NanoHTTPD Cross-site Scripting vulnerability

    Published
    MediumCVSS 6.1 EPSS 0.76%

    An issue was discovered in RouterNanoHTTPD.java in NanoHTTPD through 2.3.1. The GeneralHandler class implements a basic GET handler that prints debug information as an HTML page. Any web server that extends this class without implementing its own GET handler is vulnerable to refl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.