Microsoft.aspnetcore.mvc.abstractions

This hub aggregates every CVE we track for Microsoft.aspnetcore.mvc.abstractions, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 4 most recently published vulnerabilities affecting Microsoft.aspnetcore.mvc.abstractions.

• CVE-2017-0249An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.7.3May 12, 2017
• CVE-2017-0248Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specifi...7.5May 12, 2017
• CVE-2017-0256A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.5.3May 12, 2017
• CVE-2017-0247A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncode...7.5May 12, 2017