CVE-2025-57785

No Score

Description

A double free in the XSLT show_index function has been identified in Hiawatha web server version 10.8.2 through 11.7. This vulnerability allows an unauthenticated attacker to corrupt data, which may lead to arbitrary code execution.

References

https://kb.cert.org/vuls/id/461364

Details

Source: Mitre, NVD

Published: 2025-09-09