ASP.NET Core Elevation Of Privilege Vulnerability
CVE-2019-1302 is an elevation of privilege vulnerability in ASP.NET (rated Important).
1 version
Facts
- Microsoft id
CVE-2019-1302- Products
- ASP.NET
- Severity
- Important
- Impact
- Elevation of Privilege
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Less Likely
- Customer action required
- Yes
- Release
- 2019-Sep
- Assigned by
- Microsoft
- MSRC revision
- 1.0
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2019-09-10:
Information published.
Microsoft says
An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests.
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
The text as we first saw it
Seen by us · Microsoft's timestamp · Microsoft's page
Related changes
Mentioning the same Microsoft ids
Last updated