GHSA-prrf-397v-83xh
Open redirect in ASP.NET Core
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| NuGet | Microsoft.AspNetCore.App | >= 2.2.0, < 2.2.6 | 2.2.6 |
| NuGet | Microsoft.AspNetCore.App | >= 2.1.0, < 2.1.12 | 2.1.12 |
| NuGet | Microsoft.AspNetCore.All | >= 2.2.0, < 2.2.6 | 2.2.6 |
| NuGet | Microsoft.AspNetCore.All | >= 2.1.0, < 2.1.12 | 2.1.12 |
| NuGet | Microsoft.AspNetCore.Server.IIS | >= 2.2.0, < 2.2.6 | 2.2.6 |
| NuGet | Microsoft.AspNetCore.Server.HttpSys | >= 2.2.0, < 2.2.6 | 2.2.6 |
| NuGet | Microsoft.AspNetCore.Server.HttpSys | >= 2.1.0, < 2.1.12 | 2.1.12 |
Details
As written in the advisory (Markdown source, shown as plain text).
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.
References
External links from the advisory. They lead to third-party sites.