PT-2026-23045 · Unknown · Cpp-Httplib
0X3Xploit
·
Published
2026-03-04
·
Updated
2026-03-26
·
CVE-2026-28434
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
cpp-httplib versions prior to 0.35.0
Description
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. When a request handler throws a C++ exception and a custom exception handler has not been registered using
set exception handler(), the library includes the exception message in an HTTP response header named EXCEPTION WHAT. This header is sent to the client without authentication or specific configuration. This can lead to the leakage of internal exception messages to any client.Recommendations
Versions prior to 0.35.0 should be updated to version 0.35.0 or later.
Consider registering a custom exception handler using the
set exception handler() function to prevent the leakage of internal exception messages.Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cpp-Httplib