(MS14-059) Vulnerability in ASP.NET MVC Could Allow Security Feature Bypass (2990942)
Schweregrad:: Hoch
CVE Kennungen:: CVE-2014-4075
Hinweisdatum: 11 November 2014
Beschreibung
This update resolves a cross-site scripting vulnerability found in ASP.NET MVC. The vulnerability allows to bypass the built-in security feature in the said software.
Lösungen
Betroffene Software und Version:
- ASP.NET MVC 2.0
- ASP.NET MVC 3.0
- ASP.NET MVC 4.0
- ASP.NET MVC 5.0
- ASP.NET MVC 5.1