CVE-2019-1075

Published: Jul 15, 2019
Updated: May 9, 2024
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2019-1075" target="_blank" rel="noopener"> CVE-2019-1075
GHSA: <a href="https://github.com/advisories/GHSA-prrf-397v-83xh" target="_blank" rel="noopener"> GHSA-prrf-397v-83xh
Severity: Medium
Exploit:

A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.

CVSS v3:

CVSS v2:

CWEs:

Software	From	Fixed in
microsoft / asp.net_core	2.1	2.1.x
microsoft / asp.net_core	2.2	2.2.x
Microsoft.AspNetCore.App	2.2.0	2.2.6
Microsoft.AspNetCore.App	2.1.0	2.1.12
Microsoft.AspNetCore.All	2.2.0	2.2.6
Microsoft.AspNetCore.All	2.1.0	2.1.12
Microsoft.AspNetCore.Server.IIS	2.2.0	2.2.6
Microsoft.AspNetCore.Server.HttpSys	2.2.0	2.2.6
Microsoft.AspNetCore.Server.HttpSys	2.1.0	2.1.12