GHSA-7jgj-8wvc-jh57
.NET Core Information Disclosure
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2018-8292
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.
Paquets affectés
| Paquet | Versions |
|---|---|
| NuGet · System.Net.Http | introduced 0, fixed 4.3.4 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2018-8292 ADVISORY
- https://github.com/dotnet/announcements/issues/88 WEB
- https://access.redhat.com/errata/RHSA-2018:2902 WEB
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8292 WEB
- http://www.securityfocus.com/bid/105548 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |