CVE-2020-1161

EUVD-2022-2160
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
microsoftasp.net_core
3.1
microsoftvisual_studio_2017
15.1 ≤
𝑥
≤ 15.9
microsoftvisual_studio_2019
16.0 ≤
𝑥
≤ 16.5
𝑥
= Vulnerable software versions
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1161
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1161