Elevation of privilege in ASP.NET Core
Moderate severity
GitHub Reviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Jan 31, 2023
Package
Affected versions
>= 2.2.0, < 2.2.7
>= 2.1.0, < 2.1.13
Patched versions
2.2.7
2.1.13
Description
Published by the National Vulnerability Database
Sep 11, 2019
Published to the GitHub Advisory Database
May 24, 2022
Reviewed
Jul 7, 2022
Last updated
Jan 31, 2023
Credits
-
leecow Analyst
An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'.
References