{"action":"Upgrade Microsoft.AspNetCore.Server.IIS to 2.2.6 or later.","affected":[{"fixed":"2.2.6","introduced":"2.2.0"}],"component":"Microsoft.AspNetCore.Server.IIS","cve_ids":["CVE-2019-1075"],"ecosystem":"NuGet","epss":0.02644,"exploited":false,"fixed_versions":["2.2.6"],"ghsa_id":"GHSA-prrf-397v-83xh","id":"tcs_01M5N8X55Z2W7EXCREK4S63R58","modified_at":"2023-11-08T04:00:54.773685Z","published_at":"2022-05-24T16:50:19Z","references":["https://osv.dev/vulnerability/GHSA-prrf-397v-83xh","https://nvd.nist.gov/vuln/detail/CVE-2019-1075","https://github.com/aspnet/Announcements/issues/373","https://github.com/github/advisory-database/issues/302","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1075"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-prrf-397v-83xh#NuGet/Microsoft.AspNetCore.Server.IIS","url":"https://osv.dev/vulnerability/GHSA-prrf-397v-83xh"}],"summary":"Open redirect in ASP.NET Core"}