UpHeron
All vulnerabilities

Servers and applications

CVE-2017-11879

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".

Severity
High 8.8
Published
15 Nov 2017
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
.NETServers and applications · cpe:a:microsoft:asp.net_core
  • Version 2.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-11879
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-11879