CVE-2019-1302

Description

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'.

Affected products

• microsoft / asp.net_core2.1 – 2.1
• microsoft / asp.net_core2.2 – 2.2
• microsoft / asp.net_core3.0 – 3.0

References

• VENDOR_ADVISORYhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1302