GHSA-prrf-397v-83xhMediumCVSS 6.1

Open redirect in ASP.NET Core

Published
May 24, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2019-1075 →

📋 Description

A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.

🎯 Affected products7

  • nuget/Microsoft.AspNetCore.App:>= 2.2.0, < 2.2.6
  • nuget/Microsoft.AspNetCore.App:>= 2.1.0, < 2.1.12
  • nuget/Microsoft.AspNetCore.All:>= 2.2.0, < 2.2.6
  • nuget/Microsoft.AspNetCore.All:>= 2.1.0, < 2.1.12
  • nuget/Microsoft.AspNetCore.Server.IIS:>= 2.2.0, < 2.2.6
  • nuget/Microsoft.AspNetCore.Server.HttpSys:>= 2.2.0, < 2.2.6
  • nuget/Microsoft.AspNetCore.Server.HttpSys:>= 2.1.0, < 2.1.12

🔗 References (5)