Back to Database
Status published
Medium
CVE-2007-4385
OWASP Stinger before 2.5 allows remote attackers to bypass input...
Vulnerability Description
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-4385
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/archive/1/476288/100/0/threaded
- http://secunia.com/advisories/26441
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35981
- http://securityreason.com/securityalert/3035
- http://osvdb.org/39544
- http://www.securitytracker.com/id?1018555
- http://o0o.nu/~meder/o0o_bypassing_servlet_input_validation_filters.txt
- http://www.securityfocus.com/bid/25294
More from owasp
View All →CVE-2022-48279
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart...
Unknown
0
CVE-2022-27820
OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify...
Medium
4
CVE-2021-42717
ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted...
High
7.5
CVE-2021-42575
The OWASP Java HTML Sanitizer before 20211018.1 does not properly...
Critical
9.8
CVE-2021-35368
OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before...
Critical
9.8
Affected Vendor
owasp
View all reports →Affected Software
stinger
Vulnerable Versions:
0
Timeline
Official Publish:
August 17th, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.