CVE-2018-0785

ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability".
CSRF
Severity
MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Atk. Vector
NETWORK
Atk. Complexity
LOW
Priv. Required
NONE
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
VendorProductVersion
microsoftasp.net_core
2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/102379
http://www.securitytracker.com/id/1040151
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0785
http://www.securityfocus.com/bid/102379
http://www.securitytracker.com/id/1040151
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0785