CVE-2012-3382

CVE-2012-3382 describes an XSS vulnerability in Mono 2.10.8 and earlier caused by improper handling of error messages for a crafted file name with a forbidden extension in System.Web/HttpForbiddenHandler.cs. The connected advisories show that multiple distributions (Mandriva, openSUSE, SUSE/OpenV...

CVE-2012-3382

Cross-site scripting XSS vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote attackers to inject arbitrary web script or HTML via a file with a crafted name and a forbidden extension, which is not properl...