CVE-2025-57785 — Double free in XSLT in 'show_index'

CVE-2025-57785

Double free in XSLT in 'show_index' PUBLISHED

Description (CNA)

A Double Free in XSLT `show_index` has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to corrupt data which may lead to arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
Hiawatha / Hiawatha Web server	affected 11.47 through 10.8.2

CWE

No CWE identifiers supplied.

References

https://gitlab.com/hsleisink/hiawatha/-/blame/master/src/xslt.c?ref_type=heads#L675

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.