All vulnerabilities

Servers and applications

CVE-2018-0785

ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability".

Severity
Medium 6.5
Published
10 Jan 2018
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
.NETServers and applications · cpe:a:microsoft:asp.net_core
  • Version 2.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-0785
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-0785