CVE-2018-0787: vulnerability in Microsoft Corporation ASP.NET Core
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 9.6%
ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability".
Affected products
Microsoft Corporation · ASP.NET CoreRelated CVEs — Microsoft Corporation ASP.NET Core
In the same product, most dangerous first.