Ajax.NET Professional (AjaxPro) is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 are affected. Users are advised to upgrade. There are no known workarounds for this vulnerability.
References
Configurations
History
21 Nov 2024, 08:33
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.3 |
| References | () https://github.com/michaelschwarz/Ajax.NET-Professional/commit/c89e39b9679fcb8ab6644fe21cc7e652cb615e2b - Patch | |
| References | () https://github.com/michaelschwarz/Ajax.NET-Professional/security/advisories/GHSA-8v6j-gc74-fmpp - Vendor Advisory | |
| References | () https://www.nuget.org/packages/AjaxNetProfessional/ - Product |
08 Dec 2023, 17:25
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| CPE | cpe:2.3:a:michaelschwarz:ajax.net_professional:*:*:*:*:*:asp.net:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| References | () https://github.com/michaelschwarz/Ajax.NET-Professional/commit/c89e39b9679fcb8ab6644fe21cc7e652cb615e2b - Patch | |
| References | () https://github.com/michaelschwarz/Ajax.NET-Professional/security/advisories/GHSA-8v6j-gc74-fmpp - Vendor Advisory | |
| References | () https://www.nuget.org/packages/AjaxNetProfessional/ - Product |
05 Dec 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-05 00:15
Updated : 2024-11-21 08:33
NVD link : CVE-2023-49289
Mitre link : CVE-2023-49289
CVE.ORG link : CVE-2023-49289
JSON object : View
Products Affected
michaelschwarz
- ajax.net_professional
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')