Lucene search

K
cvelistMitreCVELIST:CVE-2010-1459
HistoryMay 27, 2010 - 6:32 p.m.

CVE-2010-1459

2010-05-2718:32:00
mitre
raw.githubusercontent.com
1

5.5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by the __VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project.

5.5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%