CVE-2010-2085: XSS
The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the VIEWSTATE parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2085?
CVE-2010-2085 is considered a critical vulnerability as it allows remote attackers to conduct cross-site scripting (XSS) attacks.
How do I fix CVE-2010-2085?
To fix CVE-2010-2085, you should change the default configuration of the EnableViewStateMac property to TRUE in your ASP.NET application.
What software versions are affected by CVE-2010-2085?
CVE-2010-2085 affects Microsoft .NET Framework versions 1.0 through to sp3.
Can CVE-2010-2085 lead to data breaches?
Yes, CVE-2010-2085 can potentially lead to data breaches by allowing attackers to execute scripts in the context of the user's session.
Is CVE-2010-2085 a known issue in older .NET frameworks?
Yes, CVE-2010-2085 is a known vulnerability specifically in the older versions of the .NET framework prior to 1.1.