Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren).
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade mono | Jul 30, 2024 | Jul 31, 2008 |
| Suse | — | Upgrade mono-locale-extrasUpgrade mono-develUpgrade mono-extrasUpgrade mono-completeUpgrade mono-core-32bitUpgrade bytefx-data-mysqlUpgrade mono-data-postgresqlUpgrade mono-winformsUpgrade mono-dataUpgrade mono-data-firebirdUpgrade ibm-data-db2Upgrade mono-webUpgrade mono-data-sqliteUpgrade mono-basicUpgrade mono-nunitUpgrade mono-jscriptUpgrade mono-coreUpgrade mono-data-oracleUpgrade suse-releaseUpgrade mono-core-x86Upgrade mono-data-sybase | Feb 17, 2015 | Jul 31, 2008 |
| Ubuntu | — | Upgrade libmono-security2.0-cilUpgrade libmono-system-web2.0-cilUpgrade libmono-security1.0-cilUpgrade libmono-system-web1.0-cil | Nov 8, 2024 | Jul 31, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub