Search for packages
| purl | pkg:nuget/Microsoft.AspNetCore.Mvc.Cors@1.1.3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-bmf7-rsbm-3fb1
Aliases: CVE-2017-8700 GHSA-3rp6-rjw4-cq39 |
Microsoft Security Advisory CVE-2017-8700: CORS bypass can enable Information Disclosure |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-axvm-3dh9-3kf6 | Improper Input Validation A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc allows remote attackers to cause a denial of service by leveraging failure to properly calculate the length of 4-byte characters in the Unicode Non-Character range. |
CVE-2017-0247
GHSA-6xh7-4v2w-36q6 |
| VCID-b2mg-kc6t-z7ht | Improper Input Validation A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
CVE-2017-0256
GHSA-j8f4-2w4p-mhjc |
| VCID-j4d8-wr24-63d3 | Improper Certificate Validation Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability." |
CVE-2017-0248
GHSA-ch6p-4jcm-h8vh |
| VCID-mrpr-pw4n-bfae | Improper Input Validation An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
CVE-2017-0249
GHSA-qhqf-ghgh-x2m4 |