CVE-2009-1354: Sergey Lyubka Mongoose

Medium severity, CVSS 4.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

Affected products

• Sergey Lyubka Mongoose: version 2.4 only

Published 2009-04-21. Last modified 2026-06-16.