CVE-2007-5473: Mono

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing (1) space or (2) dot, which is not properly handled by XSP.

Affected products

• Mono Mono: up to and including 1.2.5.1

Published 2007-10-18. Last modified 2026-06-16.