Microsoft plugs 56 vulns, including Office flaw exploited in attacks
60
CVE-2018-0785
- CVSS 3.0
- 6.5 medium
- EPSS
- 3%p87
- Published
- ·
- Modified
Description · NVD
ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability".
- Vendors
- microsoft
- Products
- asp.net core
- Weakness
- CWE-352
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H