Not rated
CVE-2020-0603 A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in…
Description
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ASP.NET Core | 3.1 | No fix stated |
| ASP.NET Core | 3.0 | No fix stated |
| ASP.NET Core | 2.1 | No fix stated |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- RHSA-2020:0130 access.redhat.com
- RHSA-2020:0134 access.redhat.com
Timeline
- Published
- Last modified
Other CVEs of ASP.NET Core
The 12 CVEs of ASP.NET Core →
CVE-2020-1161
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests
Not rated
CVE-2020-0602
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial…
Not rated
CVE-2019-1302
An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project…
Not rated
CVE-2019-1075
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing…
Not rated