CVE-2018-0808

State: PUBLISHED · Published: 2018-03-14 · Updated: 2024-09-17 · Assigner: microsoft

Description

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784.

CWE

(none)

Affected

Microsoft Corporation / ASP.NET Core — v=ASP.NET Core 1.0. 1.1, and 2.0 [affected]

CVSS

(none)

References

http://www.securityfocus.com/bid/103226 vdb-entry, x_refsource_BID
http://www.securitytracker.com/id/1040504 vdb-entry, x_refsource_SECTRACK
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0808 x_refsource_CONFIRM

Source

cvelistV5-main/cves/2018/0xxx/CVE-2018-0808.json