CVE-2018-0787

2018-03-1400:00:00

microsoft

www.cve.org

8.8 High

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.7%

JSON

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka “ASP.NET Core Elevation Of Privilege Vulnerability”.

CNA Affected

[
  {
    "product": "ASP.NET Core",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "ASP.NET Core 1.0. 1.1, and 2.0"
      }
    ]
  }
]