Not rated
CVE-2019-1302 An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project…
Description
An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ASP.NET Core | 3.0 | No fix stated |
| ASP.NET Core | 2.2 | No fix stated |
| ASP.NET Core | 2.1 | No fix stated |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of ASP.NET Core
The 12 CVEs of ASP.NET Core →
CVE-2020-1161
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests
Not rated
CVE-2020-0603
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in…
Not rated
CVE-2020-0602
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial…
Not rated
CVE-2019-1075
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing…
Not rated