Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2017-8700

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-3rp6-rjw4-cq39

Cross-origin Resource Sharing bypass in ASP.NET Core ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".

gitlab/nuget/Microsoft.AspNetCore.All/CVE-2017-8700

Permissive Cross-domain Policy with Untrusted Domains ASP.NET Core allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".

gitlab/nuget/Microsoft.AspNetCore.Mvc.Core/CVE-2017-8700

Cross-origin Resource Sharing bypass in ASP.NET Core ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".

gitlab/nuget/Microsoft.AspNetCore.Mvc.Cors/CVE-2017-8700

Cross-origin Resource Sharing bypass in ASP.NET Core ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".

retiredotnet/retiredotnet-2

Microsoft Security Advisory CVE-2017-8700: CORS bypass can enable Information Disclosure