CVE-2008-3843
Last modified
CVE-2008-3843 is a vulnerability of currently unknown severity. Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework with the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "<~/" (less-than tilde slash) sequence followed by a crafted STYLE element.. EPSS estimates a 21.99% chance of exploitation in the next 30 days.
Description
Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework with the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "<~/" (less-than tilde slash) sequence followed by a crafted STYLE element.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | .Net Framework | 1.0 | Sp3 |
| Microsoft | .Net Framework | 1.1 | Sp1 |
| Microsoft | .Net Framework | 2.0 | — |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-3843?
How severe is CVE-2008-3843?
How do I fix CVE-2008-3843?
Are you affected by CVE-2008-3843?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST