CVE-2007-4385: Input Validation
Published Aug 17, 2007
·Updated
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines.
Affected Software
1 affected component
OWASP Stinger<=2.4
Remediation
Patch Available
Patch Available
Event History
Aug 17, 2007
CVE Published
09:17 PM
Aug 18, 2007
CVE Published
via MITRE·01:12 AM
Data Sourced
via MITRE·01:12 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4385?
CVE-2007-4385 is considered a medium severity vulnerability due to its potential to bypass input validation.
2
How do I fix CVE-2007-4385?
To fix CVE-2007-4385, upgrade OWASP Stinger to version 2.5 or later.
3
What systems are affected by CVE-2007-4385?
CVE-2007-4385 affects OWASP Stinger versions prior to 2.5.
4
What types of attacks can exploit CVE-2007-4385?
CVE-2007-4385 can be exploited by sending multipart encoded requests to bypass input validation.
5
Is there a workaround for CVE-2007-4385 if I cannot upgrade?
A potential workaround for CVE-2007-4385 is to implement additional input validation controls to mitigate the vulnerability.