Lucene search

PRIOn knowledge basePRION:CVE-2019-1302

HistorySep 11, 2019 - 10:15 p.m.

Privilege escalation

2019-09-1122:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.8%

JSON

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka ‘ASP.NET Core Elevation Of Privilege Vulnerability’.

CPENameOperatorVersion
asp.net_coreeq2.1
asp.net_coreeq2.2
asp.net_coreeq3.0

Name	Operator	Version
asp.net_core	eq	2.1
asp.net_core	eq	2.2
asp.net_core	eq	3.0

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1302