CVE-2014-4075 in ASP.NET MVC
Résumé (Anglaise)
Cross-site scripting (XSS) vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View Controller (MVC) 2.0 through 5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted web page, aka "MVC XSS Vulnerability."
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Réserver
12/06/2014
Divulgation
15/10/2014
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 67828 | Microsoft ASP.NET MVC System.Web.Mvc.dll cross site scripting | 79 | Non défini | Correctif officiel | CVE-2014-4075 |