GitHub Advisory Database GitHub Reviewed CVE-2017-0256
Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc
Moderate severity
GitHub Reviewed
Published
Oct 16, 2018
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Package
nuget
Microsoft.AspNetCore.Mvc
(NuGet )
Affected versions
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
Patched versions
1.0.4
1.1.3
nuget
Microsoft.AspNetCore.Mvc.Abstractions
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
Microsoft.AspNetCore.Mvc.ApiExplorer
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
Microsoft.AspNetCore.Mvc.Core
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
Microsoft.AspNetCore.Mvc.Cors
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
Microsoft.AspNetCore.Mvc.DataAnnotations
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
Microsoft.AspNetCore.Mvc.Formatters.Json
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
Microsoft.AspNetCore.Mvc.Formatters.Xml
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
Microsoft.AspNetCore.Mvc.Localization
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
Microsoft.AspNetCore.Mvc.Razor
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
Microsoft.AspNetCore.Mvc.Razor.Host
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
Microsoft.AspNetCore.Mvc.TagHelpers
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
Microsoft.AspNetCore.Mvc.ViewFeatures
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
Microsoft.AspNetCore.Mvc.WebApiCompatShim
(NuGet )
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
nuget
System.Net.Http
(NuGet )
nuget
System.Net.Http.WinHttpHandler
(NuGet )
nuget
System.Net.Security
(NuGet )
nuget
System.Net.WebSockets.Client
(NuGet )
nuget
System.Text.Encodings.Web
(NuGet )
A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
References
Published to the GitHub Advisory Database
Oct 16, 2018
You can’t perform that action at this time.
A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
References