Skip to content
OpenAdvisories
Medium · 4.0 CVE-2024-42392 EUVD-2024-39596GHSA-xqwp-cfr5-f9gr

Improper Neutralization of Delimiters in Mongoose Web Server library

Published Nov 18, 2024 · Updated Sep 8, 2026 · Assigned by Nozomi

Description

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters.

Affected products

VendorProductAffectedFixed
Cesanta Mongoose Web Server ≤ 7.14 —

Advisories 3

References