CVE-2008-3842

Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update does not properly detect dangerous…

published August 27, 2008

CVSS
—
EPSS
20%
Percentile
97.5
In the wild
Unconfirmed
What it is

Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "</" (less-than slash) sequence.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20421 · 97.5th percentile
Published
2008-08-27T20:00Z
EPSS history
Timeline
  • 27 AUG 20:00Z
    Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update does not properly detect dangerous…
    cvelistv5