PT-2012-2233
CVE-2012-0007
·
تاريخ النشر
2012-01-10
·
تاريخ التحديث
2018-10-12
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Microsoft Anti-Cross Site Scripting (AntiXSS) Library versions 3.x through 4.0
Description
The issue allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input. This is due to the library not properly evaluating characters after the detection of a Cascading Style Sheets (CSS) escaped character.
Recommendations
For Microsoft Anti-Cross Site Scripting (AntiXSS) Library versions 3.x through 4.0, update to a version that properly evaluates characters after the detection of a CSS escaped character to prevent cross-site scripting attacks.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾