| Package | Affected versions | Patched versions |
|---|---|---|
| .net framework | = 2.0= 3.5= 3.5.1= 4.5.2= 4.6= 4.6.1 |
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 does not prevent recursive compilation of XSLT transforms, which allows remote attackers to cause a denial of service (performance degradation) via crafted XSLT data, aka ".NET Framework Stack Overflow Denial of Service Vulnerability."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free