{"action":"Upgrade mono to 2.6.4 or later.","affected":[{"fixed":"2.6.4","introduced":"0"}],"component":"mono","cve_ids":["CVE-2010-1459"],"ecosystem":"NuGet","epss":0.01931,"exploited":false,"fixed_versions":["2.6.4"],"ghsa_id":"GHSA-g5c6-w479-93xm","id":"tcs_01M5N8NNME3PJ6AQEBAS29TJ5V","modified_at":"2024-01-19T21:11:33.738479Z","published_at":"2022-05-02T06:22:59Z","references":["https://osv.dev/vulnerability/GHSA-g5c6-w479-93xm","https://nvd.nist.gov/vuln/detail/CVE-2010-1459","https://github.com/mono/mono","http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2010/04/29/asp-net-cross-site-scripting-followup-mono.aspx","http://www.mono-project.com/Vulnerabilities#ASP.NET_View_State_Cross-Site_Scripting","http://www.securityfocus.com/bid/40351"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-g5c6-w479-93xm","url":"https://osv.dev/vulnerability/GHSA-g5c6-w479-93xm"}],"summary":"Mono ASP.NET View State Cross-Site Scripting (XSS) vulnerability"}