UpHeron
All vulnerabilities

Servers and applications

CVE-2017-8700

ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".

Severity
High 7.5
Published
15 Nov 2017
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
.NETServers and applications · cpe:a:microsoft:asp.net_core
  • Version 1.0
  • Version 1.1
  • Version 2.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-8700
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-8700