XSS in Microsoft .Net_framework
CVE-2008-3842
Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) at…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.204 (97.2th percentile) — read the EPSS interpretation.
Affected products
- Microsoft .Net_framework — versions 2.0, 1.1, 1.0
- Microsoft Windows_2000
- Microsoft Windows-nt — versions 2003, xp, 2008
- Microsoft Windows_vista
- Microsoft Windows_xp
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC, Broken Link)
- cve@mitre.org (Third Party Advisory, x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)