CVE-2017-0249

EPSS 4.17%
Veröffentlicht 12.05.2017 14:29:04
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 101 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Asp.Net Model View Controller Version 1.0.0

Microsoft ≫ Asp.Net Model View Controller Version 1.0.1

Microsoft ≫ Asp.Net Model View Controller Version 1.0.2

Microsoft ≫ Asp.Net Model View Controller Version 1.0.3

Microsoft ≫ Asp.Net Model View Controller Version 1.1.0

Microsoft ≫ Asp.Net Model View Controller Version 1.1.1

Microsoft ≫ Asp.Net Model View Controller Version 1.1.2

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Abstractions Version 1.0.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Abstractions Version 1.0.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Abstractions Version 1.0.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Abstractions Version 1.0.3 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Abstractions Version 1.1.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Abstractions Version 1.1.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Abstractions Version 1.1.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Apiexplorer Version 1.0.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Apiexplorer Version 1.0.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Apiexplorer Version 1.0.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Apiexplorer Version 1.0.3 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Apiexplorer Version 1.1.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Apiexplorer Version 1.1.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Apiexplorer Version 1.1.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Cors Version 1.0.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Cors Version 1.0.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Cors Version 1.0.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Cors Version 1.0.3 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Cors Version 1.1.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Cors Version 1.1.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Cors Version 1.1.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Dataannotations Version 1.0.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Dataannotations Version 1.0.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Dataannotations Version 1.0.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Dataannotations Version 1.0.3 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Dataannotations Version 1.1.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Dataannotations Version 1.1.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Dataannotations Version 1.1.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Json Version 1.0.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Json Version 1.0.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Json Version 1.0.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Json Version 1.0.3 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Json Version 1.1.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Json Version 1.1.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Json Version 1.1.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Xml Version 1.0.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Xml Version 1.0.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Xml Version 1.0.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Xml Version 1.0.3 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Xml Version 1.1.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Xml Version 1.1.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Formatters.Xml Version 1.1.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Localization Version 1.0.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Localization Version 1.0.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Localization Version 1.0.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Localization Version 1.0.3 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Localization Version 1.1.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Localization Version 1.1.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Localization Version 1.1.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor Version 1.0.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor Version 1.0.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor Version 1.0.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor Version 1.0.3 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor Version 1.1.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor Version 1.1.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor Version 1.1.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor.Host Version 1.0.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor.Host Version 1.0.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor.Host Version 1.0.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor.Host Version 1.0.3 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor.Host Version 1.1.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor.Host Version 1.1.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Razor.Host Version 1.1.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Taghelpers Version 1.0.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Taghelpers Version 1.0.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Taghelpers Version 1.0.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Taghelpers Version 1.0.3 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Taghelpers Version 1.1.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Taghelpers Version 1.1.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Taghelpers Version 1.1.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Viewfeatures Version 1.0.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Viewfeatures Version 1.0.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Viewfeatures Version 1.0.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Viewfeatures Version 1.0.3 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Viewfeatures Version 1.1.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Viewfeatures Version 1.1.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Viewfeatures Version 1.1.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Webapicompatshim Version 1.0.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Webapicompatshim Version 1.0.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Webapicompatshim Version 1.0.2 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Webapicompatshim Version 1.0.3 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Webapicompatshim Version 1.1.0 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Webapicompatshim Version 1.1.1 SwPlatform asp.net

Microsoft ≫ Microsoft.Aspnetcore.Mvc.Webapicompatshim Version 1.1.2 SwPlatform asp.net

Microsoft ≫ System.Net.Http Version 4.1.1 SwPlatform asp.net

Microsoft ≫ System.Net.Http Version 4.3.1 SwPlatform asp.net

Microsoft ≫ System.Net.Http.Winhttphandler Version 4.0.1 SwPlatform asp.net

Microsoft ≫ System.Net.Http.Winhttphandler Version 4.3.0 SwPlatform asp.net

Microsoft ≫ System.Net.Security Version 4.0.0 SwPlatform asp.net

Microsoft ≫ System.Net.Security Version 4.3.0 SwPlatform asp.net

Microsoft ≫ System.Net.Websockets.Client Version 4.0.0 SwPlatform asp.net

Microsoft ≫ System.Net.Websockets.Client Version 4.3.0 SwPlatform asp.net

Microsoft ≫ System.Text.Encodings.Web Version 4.0.0 SwPlatform asp.net

Microsoft ≫ System.Text.Encodings.Web Version 4.3.0 SwPlatform asp.net

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.17%	0.897

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.3	3.9	3.4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://github.com/aspnet/Announcements/issues/239

Third Party Advisory

Technical Description

https://nvd.nist.gov/vuln/detail/CVE-2017-0249

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-0249

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-0249

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2017-0249