GitHub Advisoryadvisory · NuGet

GHSA-7jgj-8wvc-jh57 .NET Core Information Disclosure

HIGH Published 2021-04-21 Modified 2021-04-21 Official page ↗
Aliases
CVE-2018-8292
Ecosystem
NuGet
Packages
System.Net.Http
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200
Reviewed
2021-04-21

Affected packages

• NuGet System.Net.Http: < 4.3.4 → fixed in 4.3.4

Description

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.

Related

Alias · CVE (1)

  • CVE-2018-8292 An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References