← Database

CVE-2007-5473

MEDIUM CVSS: 5.0 Published: 2007-10-18 Modified: 2026-06-16

Description

StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing (1) space or (2) dot, which is not properly handled by XSP.

Affected Platforms

Microsoft WindowsMono Mono

Weakness Type

CWE-200

References