An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
References
Link | Resource |
---|---|
https://github.com/aspnet/Announcements/issues/239 | Technical Description Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2017-05-12 07:29
Updated : 2021-06-30 09:54
NVD link : CVE-2017-0249
Mitre link : CVE-2017-0249
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
microsoft
- asp.net_model_view_controller
- microsoft.aspnetcore.mvc.formatters.xml
- system.net.http
- microsoft.aspnetcore.mvc.abstractions
- system.text.encodings.web
- microsoft.aspnetcore.mvc.cors
- microsoft.aspnetcore.mvc.localization
- microsoft.aspnetcore.mvc.viewfeatures
- system.net.security
- system.net.http.winhttphandler
- microsoft.aspnetcore.mvc.taghelpers
- microsoft.aspnetcore.mvc.dataannotations
- microsoft.aspnetcore.mvc.webapicompatshim
- microsoft.aspnetcore.mvc.apiexplorer
- system.net.websockets.client
- microsoft.aspnetcore.mvc.formatters.json
- microsoft.aspnetcore.mvc.razor.host
- microsoft.aspnetcore.mvc.razor