CVE-2018-0787

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability".
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
microsoftCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
VendorProductVersion
microsoftasp.net_core
1.0
microsoftasp.net_core
1.1
microsoftasp.net_core
2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/103282
http://www.securitytracker.com/id/1040525
https://github.com/aspnet/Announcements/issues/295
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0787
http://www.securityfocus.com/bid/103282
http://www.securitytracker.com/id/1040525
https://github.com/aspnet/Announcements/issues/295
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0787