Open redirect in ASP.NET Core

GHSA-3wcj-rg8q-9cqv · CVE-2017-11879

Published May 14, 2022 · Modified Nov 8, 2023

Description

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2017-11879
WEB https://github.com/aspnet/Announcements/issues/277
WEB https://github.com/github/advisory-database/issues/302
WEB https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11879

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes