All vulnerabilities

Servers and applications

CVE-2018-0787

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability".

Severity
High 8.8
Published
14 Mar 2018
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
.NETServers and applications · cpe:a:microsoft:asp.net_core
  • Version 1.0
  • Version 1.1
  • Version 2.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-0787
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-0787