CVE-2019-1075

Description

A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.

Affected packages (4)

• NuGet/Microsoft.AspNetCore.All>= 2.2.0, < 2.2.6
• NuGet/Microsoft.AspNetCore.App>= 2.2.0, < 2.2.6
• NuGet/Microsoft.AspNetCore.Server.HttpSys>= 2.2.0, < 2.2.6
• NuGet/Microsoft.AspNetCore.Server.IIS>= 2.2.0, < 2.2.6

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2019-1075
• WEBhttps://github.com/aspnet/Announcements/issues/373
• WEBhttps://github.com/github/advisory-database/issues/302
• WEBhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1075