CVE-2024-42392

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-42392

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42392.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-42392

Published

2024-11-18T09:07:09.562Z

Modified

2026-08-12T03:51:42.349651164Z

Severity

4.0 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Improper Neutralization of Delimiters in Mongoose Web Server library

Details

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42392.json",
    "cwe_ids": [
        "CWE-140"
    ],
    "cna_assigner": "Nozomi"
}

References

Affected packages

Git / github.com/cesanta/mongoose

Affected ranges

Type

GIT

Repo

https://github.com/cesanta/mongoose

Events

Introduced

Last affected

6bb40e6ec96f95bfd36a816b430ea2726fac9d05

Database specific

Show details

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "cpe": "cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.14"
        }
    ]
}

Affected versions

3.*

3.2

3.3

3.4

3.5

3.6

3.7

3.8

4.*

4.0

4.1

5.*

5.0

5.1

5.2

5.3

5.4

5.5

5.5_20140120

5.6

6.*

6.0

6.1

6.10

6.11

6.12

6.13

6.14

6.15

6.16

6.17

6.18

6.2

6.3

6.4

6.5

6.6

6.7

6.9

7.*

7.0

7.1

7.11

7.12

7.13

7.14

7.2

7.3

7.4

7.5

7.6

7.7

7.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42392.json"