Vulnerabilities found in Microsoft.AspNetCore.Server.IIS.dll 2.2.0

[ghardytest]

CVE-2019-1075

Description: A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.
Discovery Date: 2019-07-19
CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS Score: 5.8

Exploitability score: 8.6
Impact score: 4.9

Vendors

• microsoft

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1075