The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade mono | Jul 30, 2024 | Jul 31, 2008 |
| Suse | — | Upgrade mono-data-sybaseUpgrade mono-jscriptUpgrade mono-core-x86Upgrade suse-releaseUpgrade mono-coreUpgrade mono-data-oracleUpgrade ibm-data-db2Upgrade mono-basicUpgrade mono-data-sqliteUpgrade mono-dataUpgrade mono-data-postgresqlUpgrade mono-webUpgrade mono-extrasUpgrade mono-locale-extrasUpgrade mono-core-32bitUpgrade bytefx-data-mysqlUpgrade mono-nunitUpgrade mono-winformsUpgrade mono-completeUpgrade mono-data-firebirdUpgrade mono-devel | Feb 17, 2015 | Jul 31, 2008 |
| Ubuntu | — | Upgrade libmono-system-web2.0-cilUpgrade libmono-system-web1.0-cilUpgrade libmono-security1.0-cilUpgrade libmono-security2.0-cil | Nov 8, 2024 | Jul 31, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub