VULNERABILITY INTELLIGENCE

CVE-2004-0847

CVSS score9.8 CRITICAL

EPSS probability75.70%

CISA KEVNot currently listed

Published2004-11-03

Last modified2026-06-16

Description

The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability."