CVE-2017-11879

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core…

published November 15, 2017

CVSS
—
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09398 · 95.4th percentile
Published
2017-11-15T03:00Z
EPSS history
Timeline
  • 15 NOV 03:00Z
    ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core…
    cvelistv5