mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-29 17:51:17 +00:00
195 lines
7.1 KiB
JSON
195 lines
7.1 KiB
JSON
|
{
|
||
|
|
"id": "CVE-2008-3422",
|
||
|
|
"sourceIdentifier": "cve@mitre.org",
|
||
|
|
"published": "2008-07-31T21:41:00.000",
|
||
|
|
"lastModified": "2018-10-03T21:55:14.523",
|
||
|
|
"vulnStatus": "Modified",
|
||
|
|
"descriptions": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren)."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"lang": "es",
|
||
|
|
"value": "M\u00faltiples vulnerabilidades de Secuencias de comandos en sitios cruzados (XSS) de las librer\u00edas de clase ASP.net en Mono 2.0 y versiones anteriores, permiten a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de atributos manipulados relacionados con (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), y (5) HtmlSelect (RenderChildren)."
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"metrics": {
|
||
|
|
"cvssMetricV2": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "2.0",
|
||
|
|
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
|
||
|
|
"accessVector": "NETWORK",
|
||
|
|
"accessComplexity": "MEDIUM",
|
||
|
|
"authentication": "NONE",
|
||
|
|
"confidentialityImpact": "NONE",
|
||
|
|
"integrityImpact": "PARTIAL",
|
||
|
|
"availabilityImpact": "NONE",
|
||
|
|
"baseScore": 4.3
|
||
|
|
},
|
||
|
|
"baseSeverity": "MEDIUM",
|
||
|
|
"exploitabilityScore": 8.6,
|
||
|
|
"impactScore": 2.9,
|
||
|
|
"acInsufInfo": false,
|
||
|
|
"obtainAllPrivilege": false,
|
||
|
|
"obtainUserPrivilege": false,
|
||
|
|
"obtainOtherPrivilege": false,
|
||
|
|
"userInteractionRequired": true
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"weaknesses": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"description": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "CWE-79"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"configurations": [
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono:mono:1.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "B31A3175-7CC6-4367-9A3C-F3324156C818"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono:mono:1.0.5:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "DBB77289-2AED-4BD4-9578-FEB0EC83701E"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono:mono:1.1.4:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "A4299404-6C79-4B21-BB8C-115FA1E3AC28"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono:mono:1.1.8.3:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "919CAD10-2F17-4F94-8116-815E77F5E998"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono:mono:1.1.13:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "19877D33-5DBF-40D7-87CB-545558C64771"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono:mono:1.1.13.4:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "F64E7267-E010-4FC8-879A-448C85BC250B"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono:mono:1.1.13.6:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "683F75A5-E4E4-4416-8E1C-A2C694A30BA3"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono:mono:1.1.13.7:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "EBE3CDD7-8553-4CB7-A0A7-B059B4D75B0C"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono:mono:1.1.17:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "DE2C11F2-2A21-481E-8350-F3777A0A8033"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono:mono:1.1.17.1:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "EFC21FA7-648F-4E41-962B-664140FA4812"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono:mono:1.1.18:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "A9FF02E9-070C-4AAA-ABB7-26FC9E56C7A2"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono:mono:1.2.5.1:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "EC72C972-FF09-4A5D-9AD4-A422EDADF5AF"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono_project:mono:*:*:*:*:*:*:*:*",
|
||
|
|
"versionEndIncluding": "2.0",
|
||
|
|
"matchCriteriaId": "0F33FED4-EE33-41EF-8B24-F751D0A9891B"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono_project:mono:1.2.1:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "403E554C-FD1B-42CE-82C2-43CC191905DE"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono_project:mono:1.2.2:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "78278FE6-26EA-4E89-9423-EABA6C4D8877"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono_project:mono:1.2.3:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "15E1695E-FD6E-4602-9BD9-9CFFF20574CA"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono_project:mono:1.2.4:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "691B3AF1-7F3F-4A7D-9F16-FE6044E33482"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono_project:mono:1.2.5:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "E2DE3739-A2ED-47D7-9AE9-442A95ACFC3A"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono_project:mono:1.2.6:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "DDAB5331-AD2E-483C-93C3-8095BBBA0572"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:mono_project:mono:1.9:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "E3CC03DC-14A6-4C45-9511-7CE8E7F727BB"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"references": [
|
||
|
|
{
|
||
|
|
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html",
|
||
|
|
"source": "cve@mitre.org"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://lists.ximian.com/pipermail/mono-devel-list/2008-July/028633.html",
|
||
|
|
"source": "cve@mitre.org"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.securityfocus.com/bid/30471",
|
||
|
|
"source": "cve@mitre.org"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "https://bugzilla.novell.com/show_bug.cgi?id=413534",
|
||
|
|
"source": "cve@mitre.org"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44229",
|
||
|
|
"source": "cve@mitre.org"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "https://usn.ubuntu.com/826-1/",
|
||
|
|
"source": "cve@mitre.org"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|