{"action":"Upgrade Microsoft.AspNetCore.All to 2.1.12 (2.1.x) or 2.2.6 (2.2.x) or later.","affected":[{"fixed":"2.2.6","introduced":"2.2.0"},{"fixed":"2.1.12","introduced":"2.1.0"}],"component":"Microsoft.AspNetCore.All","cve_ids":["CVE-2019-1075"],"ecosystem":"NuGet","epss":0.02644,"exploited":false,"fixed_versions":["2.2.6","2.1.12"],"ghsa_id":"GHSA-prrf-397v-83xh","id":"tcs_01M5N8X4ZXMCS9SCATCVGPQA2X","modified_at":"2023-11-08T04:00:54.773685Z","published_at":"2022-05-24T16:50:19Z","references":["https://osv.dev/vulnerability/GHSA-prrf-397v-83xh","https://nvd.nist.gov/vuln/detail/CVE-2019-1075","https://github.com/aspnet/Announcements/issues/373","https://github.com/github/advisory-database/issues/302","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1075"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-prrf-397v-83xh#NuGet/Microsoft.AspNetCore.All","url":"https://osv.dev/vulnerability/GHSA-prrf-397v-83xh"}],"summary":"Open redirect in ASP.NET Core"}