CVE-2008-3422: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3422?
CVE-2008-3422 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2008-3422?
To mitigate CVE-2008-3422, upgrade to a version of Mono that is later than 2.0, as earlier versions are affected.
What software versions are affected by CVE-2008-3422?
CVE-2008-3422 affects multiple versions of Mono, including 1.0 through 2.0.
What kind of attack does CVE-2008-3422 facilitate?
CVE-2008-3422 facilitates cross-site scripting (XSS) attacks by allowing the injection of arbitrary web scripts or HTML.
Who can exploit CVE-2008-3422?
Remote attackers can exploit CVE-2008-3422 to execute XSS attacks on vulnerable Mono applications.