GHSA-3wcj-rg8q-9cqvHighCVSS 8.8

Open redirect in ASP.NET Core

Published
May 14, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2017-11879 →

📋 Description

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".

🎯 Affected products2

  • nuget/Microsoft.AspNetCore.All:>= 2.0.0, < 2.0.3
  • nuget/Microsoft.AspNetCore.Mvc.Core:= 2.0.0

🔗 References (5)