Microsoft ASP.NET ValidateRequest Filters Bypass Cross-Site Scripting Vulnerability in NFA
Article ID: 14078
Updated On: 02-14-2018
Products
Network Flow Analysis
Issue/Introduction
Security team has identified that there is Microsoft ASP.NET ValidateRequest Filters Bypass Cross-Site Scripting Vulnerability for NFA. Need to know if NFA is vulnerable to this.
Whether NFA is vulnerable to Microsoft ASP.NET ValidateRequest Filters Bypass Cross-Site Scripting Vulnerability?
Environment
NFA 9.2 to 9.3.6
Resolution
NFA 9.3.6 uses .NET 4.5.1 for the Console, and NFA 9.4 will ship with .NET 4.6.2.
All web interactions use the CLR associated with those versions of .NET, so this vulnerability is a non-issue in 9.3.6 and 9.4.
Additional Information
Feedback
Was this article helpful?
Yes
No
Powered by
