Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-8292

Fixed in a distro release EPSS 15%

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.

Published 2018-10-10 · CVE record · OSV

Products: Microsoft PowerShell Core, Microsoft .NET Core

Fixed upstream

EcosystemPackageFixed in
NuGetSystem.Net.Http4.3.4

Distro releases

ReleasePackageFixed in
Red Hat rhel dotnet 1.0rh-dotnetcore10-dotnetcore0:1.0.13-1.el7
Red Hat rhel dotnet 1.0rh-dotnetcore10-dotnetcore-debuginfo0:1.0.13-1.el7
Red Hat rhel dotnet 1.1rh-dotnetcore11-dotnetcore0:1.1.10-1.el7
Red Hat rhel dotnet 1.1rh-dotnetcore11-dotnetcore-debuginfo0:1.1.10-1.el7