GHSA-j8f4-2w4p-mhjcMediumCVSS 5.3

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc

Published
October 16, 2018
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2017-0256 →

📋 Description

A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

🎯 Affected products38

  • nuget/Microsoft.AspNetCore.Mvc:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.Core:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Core:>= 1.1.0, < 1.1.3
  • nuget/System.Net.Http:= 4.1.1
  • nuget/System.Net.Http:= 4.3.1
  • nuget/System.Text.Encodings.Web:= 4.0.0
  • nuget/System.Text.Encodings.Web:= 4.3.0
  • nuget/System.Net.Http.WinHttpHandler:= 4.0.0
  • nuget/System.Net.Http.WinHttpHandler:= 4.3.0
  • nuget/System.Net.Security:= 4.0.0
  • nuget/System.Net.Security:= 4.3.0
  • nuget/System.Net.WebSockets.Client:= 4.0.0
  • nuget/System.Net.WebSockets.Client:= 4.3.0
  • nuget/Microsoft.AspNetCore.Mvc.Abstractions:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Abstractions:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.ApiExplorer:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.ApiExplorer:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.Cors:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Cors:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.DataAnnotations:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.DataAnnotations:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.Formatters.Json:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Formatters.Json:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.Formatters.Xml:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Formatters.Xml:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.Localization:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Localization:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.Razor.Host:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Razor.Host:>= 1.1.0, < 1.1.3
  • +8 more not shown

🔗 References (3)