VulnerableCode Package Details - pkg:nuget/Microsoft.AspNetCore.All@1.1.0

Search for packages

Vulnerability	Summary	Fixed by
VCID-4ycz-b62h-aaae Aliases: CVE-2017-8700 GHSA-3rp6-rjw4-cq39	Permissive Cross-domain Policy with Untrusted Domains ASP.NET Core allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".	2.0.3 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-kqu6-94cz-aaaq Aliases: CVE-2018-0875 GHSA-xcvr-qv8h-m7xw	Uncontrolled Resource Consumption .NET Core, .NET Core, NET Core and PowerShell Core allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".	2.0.0-preview1-final Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 2.0.3 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-4ycz-b62h-aaae
Aliases:
CVE-2017-8700
GHSA-3rp6-rjw4-cq39

Permissive Cross-domain Policy with Untrusted Domains ASP.NET Core allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".

2.0.3
Affected by 3 other vulnerabilities.

VCID-kqu6-94cz-aaaq
Aliases:
CVE-2018-0875
GHSA-xcvr-qv8h-m7xw

Uncontrolled Resource Consumption .NET Core, .NET Core, NET Core and PowerShell Core allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".

2.0.0-preview1-final
Affected by 5 other vulnerabilities.

2.0.3
Affected by 3 other vulnerabilities.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-01-16T23:28:15.577014+00:00	GitLab Importer	Affected by	VCID-kqu6-94cz-aaaq	None	35.1.0
2025-01-16T23:28:15.244048+00:00	GitLab Importer	Affected by	VCID-4ycz-b62h-aaae	None	35.1.0
2024-09-17T22:45:28.373303+00:00	GitLab Importer	Affected by	VCID-4ycz-b62h-aaae	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.AspNetCore.All/CVE-2017-8700.yml	34.0.1
2024-09-17T22:45:28.256865+00:00	GitLab Importer	Affected by	VCID-kqu6-94cz-aaaq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.AspNetCore.All/CVE-2018-0875.yml	34.0.1
2024-01-03T18:06:56.139982+00:00	GitLab Importer	Affected by	VCID-4ycz-b62h-aaae	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.AspNetCore.All/CVE-2017-8700.yml	34.0.0rc1
2024-01-03T18:06:56.032953+00:00	GitLab Importer	Affected by	VCID-kqu6-94cz-aaaq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.AspNetCore.All/CVE-2018-0875.yml	34.0.0rc1