CVE-2010-4225
Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote...
Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown vectors related to an "unloading bug."
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown vectors related to an "unloading bug."
- Record
CVE-2010-4225- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown vectors related to an "unloading bug."
- Record
CVE-2010-4225- Updated
- 2026-11-02
EUVDEUVD-2010-4199 No score
Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown vectors related to an "unloading bug."
- Record
EUVD-2010-4199- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-25f3-2w4g-m595 No score
Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote...
Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown vectors related to an "unloading bug."
- Record
GHSA-25f3-2w4g-m595- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown vectors related to an "unloading bug."
- Record
CVE-2010-4225- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-4225 No score
Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown vectors related to an "unloading bug."
- Record
DEBIAN-CVE-2010-4225- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10260-1 No score
apache2-mod_mono-3.12-1.7 on GA media
These are all security issues fixed in the apache2-mod_mono-3.12-1.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10260-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10476-1 No score
ibm-data-db2-4.6.2-1.1 on GA media
These are all security issues fixed in the ibm-data-db2-4.6.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10476-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
monoDebian:12 |
before 2.6.7-5 | 2.6.7-5 |
monoDebian:13 |
before 2.6.7-5 | 2.6.7-5 |
monoDebian:14 |
before 2.6.7-5 | 2.6.7-5 |
apache2-mod_monoopenSUSE:Tumbleweed |
before 3.0.11-3.3 | 3.0.11-3.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4225 is a medium vulnerability (CVSS 5.0) in Mono, published January 11, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. Fixed in mono 2.6.7-5.