← Back

Asp.net Core

asp.net_core

Vendor: Microsoft • 41 CVEs

CVEs (41)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-11879
1Microsoft
1Asp.net Core
May 13, 2026
Nov 15, 2017
N/A· v4
8.8 HIGH· v3
4.3 MEDIUM· v2
ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".