CVE-2024-42392

Cesanta · Published November 18, 2024

7.5

CVSS v3.1

HIGH

Patch availableGet patch

Description

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters.

Affected Products

Mongoose <= 7.14

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H