GitHub Advisoryadvisory · NuGet

GHSA-8884-xcr4-r68p Improper Input Validation in Microsoft.NETCore.App

HIGH Published 2022-05-17 Modified 2022-11-01 Official page ↗
Aliases
CVE-2017-8585
Ecosystem
NuGet
Packages
Microsoft.NETCore.App
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20
Reviewed
2022-11-01

Affected packages

• NuGet Microsoft.NETCore.App: >= 1.0.0, < 1.0.7 → fixed in 1.0.7 • NuGet Microsoft.NETCore.App: >= 1.1.0, < 1.1.4 → fixed in 1.1.4

Description

Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in denial of service, aka .NET Denial of Service Vulnerability.

Related

Alias · CVE (1)

  • CVE-2017-8585 Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application,… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References