CVE-2019-1302
CVE-2019-1302
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 4.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
11 Sep 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'.
Affected products
Microsoft · ASP.NET Core