CVE-2008-3906

Fixed in a distro release EPSS 7%

CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.

Published 2008-09-04 · CVE record · OSV

Products: mono, mono_project mono

Distro releases