ASP.NET Core 1.0, 1.1, and 2.0 allow an malicious user to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
microsoft asp.net core 1.0 |
||
microsoft asp.net core 1.1 |
||
microsoft asp.net core 2.0 |
Not enough? How about a few dozen PDF remote code holes?
Microsoft and Adobe are getting into the holiday spirit this month by gorging users and admins with a glut of security fixes. The November of Patch Tuesday brings fixes for more than 130 bugs between the two software giants for products including IE, Edge, Office, Flash Player and Acrobat. Microsoft's patch dump addresses a total 53 CVE-listed vulnerabilities, including three that already have been publicly detailed. Those include CVE-2017-11827, a memory corruption flaw in Edge and IE that lets...
Vulmon