Описание
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Hardened Images | dotnet10.0 | Not affected | ||
| Red Hat Hardened Images | dotnet8.0 | Not affected | ||
| Red Hat Hardened Images | dotnet9.0 | Not affected | ||
| Red Hat Enterprise Linux 10 | dotnet8.0 | Fixed | RHSA-2026:86168 | 20.10.2026 |
| Red Hat Enterprise Linux 10 | dotnet9.0 | Fixed | RHSA-2026:86172 | 20.10.2026 |
| Red Hat Enterprise Linux 10 | dotnet10.0 | Fixed | RHSA-2026:86195 | 20.10.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | dotnet9.0 | Fixed | RHSA-2026:88424 | 22.10.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | dotnet8.0 | Fixed | RHSA-2026:88474 | 22.10.2026 |
| Red Hat Enterprise Linux 8 | dotnet9.0 | Fixed | RHSA-2026:86170 | 20.10.2026 |
| Red Hat Enterprise Linux 8 | dotnet10.0 | Fixed | RHSA-2026:86192 | 20.10.2026 |
Показывать по
10
Дополнительная информация
Статус:
Important
Дефект:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=2548804dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability
EPSS
Процентиль: 61%
0.00946
Низкий
8.8 High
CVSS3
Связанные уязвимости
CVSS3: 8.8
ubuntu
14 дней назад
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
CVSS3: 8.8
nvd
13 дней назад
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
CVSS3: 8.8
github
13 дней назад
Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability
EPSS
Процентиль: 61%
0.00946
Низкий
8.8 High
CVSS3