CVE-2010-1459

The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct…

published May 27, 2010

CVSS
—
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by the __VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01931 · 79.9th percentile
Published
2010-05-27T18:32Z
EPSS history
Timeline
  • 27 MAY 18:32Z
    The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct…
    cvelistv5