high7.3
CVE-2017-0249
An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
Impact
An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Asp.Net Model View Controller | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1 |
| Microsoft | Microsoft.Aspnetcore.Mvc.Abstractions | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1 |
| Microsoft | Microsoft.Aspnetcore.Mvc.Apiexplorer | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1 |
| Microsoft | Microsoft.Aspnetcore.Mvc.Cors | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1 |
| Microsoft | Microsoft.Aspnetcore.Mvc.Dataannotations | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1 |
| Microsoft | Microsoft.Aspnetcore.Mvc.Formatters.Json | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1 |
| Microsoft | Microsoft.Aspnetcore.Mvc.Formatters.Xml | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1 |
| Microsoft | Microsoft.Aspnetcore.Mvc.Localization | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1 |
| Microsoft | Microsoft.Aspnetcore.Mvc.Razor | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1 |
| Microsoft | Microsoft.Aspnetcore.Mvc.Razor.Host | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1 |
| Microsoft | Microsoft.Aspnetcore.Mvc.Taghelpers | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1 |
| Microsoft | Microsoft.Aspnetcore.Mvc.Viewfeatures | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1 |