GHSA-qhqf-ghgh-x2m4HighCVSS 7.3

High severity vulnerability that affects Microsoft.AspNetCore.Mvc

Published
October 16, 2018
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2017-0249 →

📋 Description

See https://nvd.nist.gov/vuln/detail/CVE-2017-0249 & https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0249

🎯 Affected products39

  • nuget/Microsoft.AspNetCore.Mvc:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Core:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Core:>= 1.1.0, < 1.1.3
  • nuget/System.Net.Http:= 4.1.1
  • nuget/System.Net.Http:= 4.3.1
  • nuget/System.Text.Encodings.Web:= 4.0.0
  • nuget/System.Text.Encodings.Web:= 4.3.0
  • nuget/System.Net.Http.WinHttpHandler:= 4.0.0
  • nuget/System.Net.Http.WinHttpHandler:= 4.3.0
  • nuget/System.Net.Security:= 4.0.0
  • nuget/System.Net.Security:= 4.3.0
  • nuget/System.Net.WebSockets.Client:= 4.0.0
  • nuget/System.Net.WebSockets.Client:= 4.3.0
  • nuget/Microsoft.AspNetCore.Mvc.Abstractions:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Abstractions:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.ApiExplorer:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.ApiExplorer:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.Cors:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Cors:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.DataAnnotations:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.DataAnnotations:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.Formatters.Json:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Formatters.Json:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.Formatters.Xml:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Formatters.Xml:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.Localization:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Localization:>= 1.1.0, < 1.1.3
  • nuget/Microsoft.AspNetCore.Mvc.Razor.Host:>= 1.0.0, < 1.0.4
  • nuget/Microsoft.AspNetCore.Mvc.Razor.Host:>= 1.1.0, < 1.1.3
  • +9 more not shown

🔗 References (4)