Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-1302

Fixed upstream EPSS 5%

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'.

Published 2019-09-11 · CVE record · OSV

Products: Microsoft ASP.NET Core

Fixed upstream

EcosystemPackageFixed in
NuGetMicrosoft.AspNetCore.SpaServices2.2.7
NuGetMicrosoft.AspNetCore.SpaServices2.1.13