{"cvss":0.0,"datePublished":"2005-02-08T00:00:00Z","dateUpdated":"2005-02-08T00:00:00Z","description":"The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) \"\\\" (backslash) or (2) \"%5C\" (encoded backslash), aka \"Path Validation Vulnerability.\"","dueDate":"","id":"CVE-2004-0847","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"asp.net","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Microsoft asp.net Improper Limitation of a Pathname to a Restricted Directory","vendor":"Microsoft"}