CVE-2010-4225

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-01-11 · updated 2026-06-16
Weakness: CWE-200

Description

Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown vectors related to an "unloading bug."

Affected products

mono: 2.8, 2.8.1

References

http://osvdb.org/70312
http://secunia.com/advisories/42842
http://www.mono-project.com/Vulnerabilities#XSP.2Fmod_mono_source_code_disclosure
http://www.securityfocus.com/bid/45711
http://www.vupen.com/english/advisories/2011/0051
https://exchange.xforce.ibmcloud.com/vulnerabilities/64532
http://osvdb.org/70312
http://secunia.com/advisories/42842
http://www.mono-project.com/Vulnerabilities#XSP.2Fmod_mono_source_code_disclosure
http://www.securityfocus.com/bid/45711
http://www.vupen.com/english/advisories/2011/0051
https://exchange.xforce.ibmcloud.com/vulnerabilities/64532

Get alerted when CVE-2010-4225 or the next vulnerability affects your stack