Skip to content

High severity vulnerability that affects Microsoft.AspNetCore.Mvc

High severity GitHub Reviewed Published Oct 16, 2018 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

nuget DisCatSharp (NuGet)

Affected versions

<= 9.8.3

Patched versions

None
nuget Microsoft.AspNetCore.Mvc (NuGet)
>= 1.1.0, < 1.1.3
>= 1.0.0, < 1.0.4
1.1.3
1.0.4
nuget Microsoft.AspNetCore.Mvc.Abstractions (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget Microsoft.AspNetCore.Mvc.ApiExplorer (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget Microsoft.AspNetCore.Mvc.Core (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget Microsoft.AspNetCore.Mvc.Cors (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget Microsoft.AspNetCore.Mvc.DataAnnotations (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget Microsoft.AspNetCore.Mvc.Formatters.Json (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget Microsoft.AspNetCore.Mvc.Formatters.Xml (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget Microsoft.AspNetCore.Mvc.Localization (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget Microsoft.AspNetCore.Mvc.Razor (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget Microsoft.AspNetCore.Mvc.Razor.Host (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget Microsoft.AspNetCore.Mvc.TagHelpers (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget Microsoft.AspNetCore.Mvc.ViewFeatures (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget Microsoft.AspNetCore.Mvc.WebApiCompatShim (NuGet)
>= 1.0.0, < 1.0.4
>= 1.1.0, < 1.1.3
1.0.4
1.1.3
nuget System.Net.Http (NuGet)
= 4.1.1
= 4.3.1
4.1.2
4.3.2
nuget System.Net.Http.WinHttpHandler (NuGet)
= 4.0.0
= 4.3.0
4.0.1
4.3.1
nuget System.Net.Security (NuGet)
= 4.0.0
= 4.3.0
4.0.1
4.3.1
nuget System.Net.WebSockets.Client (NuGet)
= 4.0.0
= 4.3.0
4.0.1
4.3.1
nuget System.Text.Encodings.Web (NuGet)
= 4.0.0
= 4.3.0
4.0.1
4.3.1
Published by the National Vulnerability Database May 12, 2017
Published to the GitHub Advisory Database Oct 16, 2018
Reviewed Jun 16, 2020
Last updated Feb 1, 2023

Severity

High
7.3
/ 10

CVSS base metrics

Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CVE ID

CVE-2017-0249

GHSA ID

GHSA-qhqf-ghgh-x2m4

Source code

No known source code
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.