CVE-2009-4535

MEDIUM CVSS: 5.0 Published: 2009-12-31 Modified: 2026-06-16

Description

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) character to the URI.

Affected Platforms

Valenok Mongoose

Weakness Type

CWE-200

References