Описание
StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing (1) space or (2) dot, which is not properly handled by XSP.
Ссылки
Уязвимые конфигурации
Конфигурация 1Версия до 1.2.5.1 (включая)
Одновременно
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
cpe:2.3:a:mono:mono:*:*:*:*:*:*:*:*
EPSS
Процентиль: 55%
0.00329
Низкий
5 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
debian
около 18 лет назад
StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when runnin ...
github
больше 3 лет назад
StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing (1) space or (2) dot, which is not properly handled by XSP.
EPSS
Процентиль: 55%
0.00329
Низкий
5 Medium
CVSS2
Дефекты
CWE-200