Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-57783 EUVD-2025-206340GHSA-mrpv-h52h-rxhw

Improper header parsing may lead to request smuggling

Published Jan 26, 2026 · Updated Jan 26, 2026 · Assigned by certcc

Description

Improper header parsing may lead to request smuggling has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to access restricted resources managed by Hiawatha webserver.

Affected products

VendorProductAffectedFixed
Hiawatha Hiawatha Web server 11.7 – ≤ 8.5 —

References