Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-655Q-9GVG-Q4CM
HistoryMay 24, 2022 - 5:06 p.m.

Remote code execution in ASP.NET Core

2022-05-2417:06:16
CWE-119
GitHub Advisory Database
github.com
14

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.024 Low

EPSS

Percentile

89.7%

JSON

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka ‘ASP.NET Core Remote Code Execution Vulnerability’.

Related

osv 3
symantec 1
veracode 1
prion 1
mscve 1
cve 1
redhatcve 1
redhat 2
nessus 6
oraclelinux 1
openvas 2
kaspersky 1
talosblog 1
osv
osv
CVE-2020-0603
2020-01-14 23:15:30
BIT-aspnet-core-2020-0603
2024-03-06 10:54:18
Remote code execution in ASP.NET Core
2022-05-24 17:06:16
symantec
symantec
Microsoft ASP.NET Core CVE-2020-0603 Remote Code Execution Vulnerability
2020-01-14 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2020-01-16 08:10:38
prion
prion
Remote code execution
2020-01-14 23:15:00
mscve
mscve
ASP.NET Core Remote Code Execution Vulnerability
2020-01-14 08:00:00
cve
cve
CVE-2020-0603
2020-01-14 23:15:00
redhatcve
redhatcve
CVE-2020-0603
2020-01-14 20:09:07
redhat
redhat
(RHSA-2020:0130) Critical: .NET Core on Red Hat Enterprise Linux security and bug fix update
2020-01-16 14:41:13
(RHSA-2020:0134) Critical: .NET Core on Red Hat Enterprise Linux security and bug fix update
2020-01-16 16:17:47
nessus
nessus
CentOS 8 : .NET Core on Red Hat Enterprise Linux (CESA-2020:0130)
2021-02-01 00:00:00
Oracle Linux 8 : .NET / Core / Enterprise / Hat / Linux / Red / on (ELSA-2020-0130)
2020-01-21 00:00:00
RHEL 7 : .NET Core on Red Hat Enterprise Linux (RHSA-2020:0134)
2020-01-21 00:00:00
oraclelinux
oraclelinux
.NET Core on Red Hat Enterprise Linux security and bug fix update
2020-01-20 00:00:00
openvas
openvas
ASP.NET Core 3.0.x < 3.0.2, 3.1.0 Multiple Vulnerabilities (Jan 2020)
2020-01-16 00:00:00
ASP.NET Core SDK 3.0.x < 3.0.102, 3.1.x < 3.1.101 Multiple Vulnerabilities (Jan 2020)
2020-01-16 00:00:00
kaspersky
kaspersky
KLA11634 Multiple vulnerabilities in Microsoft Developer Tools
2020-01-14 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday — Jan. 2020: Vulnerability disclosures and Snort coverage
2020-01-17 10:14:27

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.024 Low

EPSS

Percentile

89.7%

JSON
Related for GHSA-655Q-9GVG-Q4CM
osv3symantec1veracode1prion1mscve1cve1redhatcve1redhat2nessus6oraclelinux1openvas2kaspersky1talosblog1