GHSA-qhqf-ghgh-x2m4

ghsaUSosv

High severity vulnerability that affects Microsoft.AspNetCore.Mvc

view advisory published 2018-10-16Licence: CC-BY-4.0

See https://nvd.nist.gov/vuln/detail/CVE-2017-0249 & https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0249

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-0249US	high7.3	4.25% (91st)	—	2017-05-12
An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.