StaticFileHandler.cs in System.Web in Mono prior to 1.2.5.2, when running on Windows, allows remote malicious users to obtain source code of sensitive files via a request containing a trailing (1) space or (2) dot, which is not properly handled by XSP.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mono mono |