microsoft asp.net core 1.1 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

ASP.NET Core 1.0, 1.1, and 2.0 allow an malicious user to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".

Microsoft Asp.net Core 1.0 Microsoft Asp.net Core 1.1 Microsoft Asp.net Core 2.0

1 Article

7.5

CVSSv3

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784.

Microsoft Asp.net Core 1.1 Microsoft Asp.net Core 1.0 Microsoft Asp.net Core 2.0

1 Article

8.8

CVSSv3

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability".

Microsoft Asp.net Core 1.0 Microsoft Asp.net Core 2.0 Microsoft Asp.net Core 1.1

7.5

CVSSv3

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.

Microsoft Asp.net Model View Controller 5.2 Microsoft Asp.net Webpages 3.2.3 Microsoft Asp.net Core 2.0 Microsoft Asp.net Core 1.1 Microsoft Asp.net Core 1.0

6.5

CVSSv3

ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability".

Microsoft Asp.net Core 2.0

1 Article

8.8

CVSSv3

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0808.

Microsoft Asp.net Core 2.0

7.5

CVSSv3

A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc ...

Microsoft Asp.net Model View Controller 1.1.0 Microsoft Asp.net Model View Controller 1.1.1 Microsoft Asp.net Model View Controller 1.1.2 Microsoft Microsoft.aspnetcore.mvc.abstractions 1.0.0 Microsoft Microsoft.aspnetcore.mvc.apiexplorer 1.1.2 Microsoft Asp.net Model View Controller 1.0.0 Microsoft Asp.net Model View Controller 1.0.1 Microsoft Asp.net Model View Controller 1.0.2 Microsoft Microsoft.aspnetcore.mvc.dataannotations 1.0.2 Microsoft Microsoft.aspnetcore.mvc.dataannotations 1.0.3 Microsoft Microsoft.aspnetcore.mvc.dataannotations 1.1.0 Microsoft Microsoft.aspnetcore.mvc.dataannotations 1.1.1 Microsoft Microsoft.aspnetcore.mvc.formatters.xml 1.1.1 Microsoft Microsoft.aspnetcore.mvc.formatters.xml 1.1.2 Microsoft Microsoft.aspnetcore.mvc.localization 1.0.0 Microsoft Microsoft.aspnetcore.mvc.localization 1.0.1 Microsoft Microsoft.aspnetcore.mvc.razor.host 1.0.0 Microsoft Microsoft.aspnetcore.mvc.razor.host 1.0.1 Microsoft Microsoft.aspnetcore.mvc.razor.host 1.0.2 Microsoft Microsoft.aspnetcore.mvc.razor.host 1.0.3 Microsoft Microsoft.aspnetcore.mvc.razor.host 1.1.0 Microsoft Microsoft.aspnetcore.mvc.viewfeatures 1.0.3

1 Github repository

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook