Skip to content
Sign in
Not rated

CVE-2017-11879 ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a…

Description

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".

Affected products and versions

Product Affected versions Fixed in
ASP.NET Core Versions not published

Other CVEs of ASP.NET Core

The 9 CVEs of ASP.NET Core →
CVE-2018-0787 ASP.NET Core 1.0 Not rated CVE-2018-0808 ASP.NET Core 1.0 Not rated CVE-2018-0784 ASP.NET Core 1.0 Not rated CVE-2018-0785 ASP.NET Core 1.0 Not rated
Track this CVE