tocsin

CVE-2017-0248

19 advisories.

NuGet/Microsoft.AspNetCore.Mvc CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.Core CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.Core to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/System.Net.Http CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade System.Net.Http to 4.1.2 (4.1.x) or 4.3.2 (4.3.x) or later.

Affected

introducedfixedlast affected
4.1.14.1.2-
4.3.14.3.2-

Fixed versions

4.1.24.3.2

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/System.Text.Encodings.Web CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade System.Text.Encodings.Web to 4.0.1 (4.0.x) or 4.3.1 (4.3.x) or later.

Affected

introducedfixedlast affected
4.0.04.0.1-
4.3.04.3.1-

Fixed versions

4.0.14.3.1

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/System.Net.Http.WinHttpHandler CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade System.Net.Http.WinHttpHandler to 4.0.1 (4.0.x) or 4.3.1 (4.3.x) or later.

Affected

introducedfixedlast affected
4.0.04.0.1-
4.3.04.3.1-

Fixed versions

4.0.14.3.1

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/System.Net.Security CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade System.Net.Security to 4.0.1 (4.0.x) or 4.3.1 (4.3.x) or later.

Affected

introducedfixedlast affected
4.0.04.0.1-
4.3.04.3.1-

Fixed versions

4.0.14.3.1

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/System.Net.WebSockets.Client CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade System.Net.WebSockets.Client to 4.0.1 (4.0.x) or 4.3.1 (4.3.x) or later.

Affected

introducedfixedlast affected
4.0.04.0.1-
4.3.04.3.1-

Fixed versions

4.0.14.3.1

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.Abstractions CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.Abstractions to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.ApiExplorer CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.ApiExplorer to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.Cors CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.Cors to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.DataAnnotations CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.DataAnnotations to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.Formatters.Json CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.Formatters.Json to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.Formatters.Xml CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.Formatters.Xml to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.Localization CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.Localization to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.Razor.Host CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.Razor.Host to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.Razor CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.Razor to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.TagHelpers CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.TagHelpers to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.ViewFeatures CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.ViewFeatures to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON

NuGet/Microsoft.AspNetCore.Mvc.WebApiCompatShim CVE-2017-0248: medium, EPSS 5.51%

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Action: Upgrade Microsoft.AspNetCore.Mvc.WebApiCompatShim to 1.0.4 (1.0.x) or 1.1.3 (1.1.x) or later.

Affected

introducedfixedlast affected
1.0.01.0.4-
1.1.01.1.3-

Fixed versions

1.0.41.1.3

Sources

CVE-2017-0248 · published · modified · JSON