CVE-2019-1075
Fixed upstream EPSS 3%
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.
Products: Microsoft ASP.NET Core
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| NuGet | Microsoft.AspNetCore.All | 2.2.6 |
| NuGet | Microsoft.AspNetCore.All | 2.1.12 |
| NuGet | Microsoft.AspNetCore.App | 2.2.6 |
| NuGet | Microsoft.AspNetCore.App | 2.1.12 |
| NuGet | Microsoft.AspNetCore.Server.HttpSys | 2.2.6 |
| NuGet | Microsoft.AspNetCore.Server.HttpSys | 2.1.12 |
| NuGet | Microsoft.AspNetCore.Server.IIS | 2.2.6 |