CVE-2018-0808

published 2018-03-14

CVE-2018-0808: ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C N I N A H

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
microsoft	asp.net_core	—	—
microsoft	asp.net_core	—	—
microsoft	asp.net_core	—	—
microsoft_corporation	asp.net_core	—	—
msrc	asp.net_core_2.0	—	—