GitHub Advisoryadvisory · NuGet

GHSA-xr8f-59pp-rxxh Elevation of privilege in ASP.NET Core

MEDIUM Published 2022-05-24 Modified 2022-07-07 Official page ↗
Aliases
CVE-2019-1302
Ecosystem
NuGet
Packages
Microsoft.AspNetCore.SpaServices
Severity
Moderate
Reviewed
2022-07-07

Affected packages

• NuGet Microsoft.AspNetCore.SpaServices: >= 2.2.0, < 2.2.7 → fixed in 2.2.7 • NuGet Microsoft.AspNetCore.SpaServices: >= 2.1.0, < 2.1.13 → fixed in 2.1.13

Description

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'.

Related

Alias · CVE (1)

  • CVE-2019-1302 An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to… vulnerability

References