Описание
ASP.NET Core Spoofing Vulnerability
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect. An attacker who successfully exploited the vulnerability could redirect a targeted user to a malicious website.
To exploit the vulnerability, an attacker could send a link that has a specially crafted URL, and convince the user to click the link.
The update addresses the vulnerability by correcting how ASP.NET Core parses URLs.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| ASP.NET Core 2.1 | ||
| ASP.NET Core 2.2 |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
Older Software Release
DOS
EPSS
Связанные уязвимости
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.
Уязвимость программной платформы ASP.NET Core, связанная с использованием открытой переадресации, позволяющая нарушителю перенаправить целевого пользователя на вредоносный веб-сайт
EPSS