GHSA-qhqf-ghgh-x2m4

Suggest an improvement
Source
https://github.com/advisories/GHSA-qhqf-ghgh-x2m4
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-qhqf-ghgh-x2m4
Aliases
  • CVE-2017-0249
Published
2018-10-16T19:57:38Z
Modified
2023-11-08T03:58:40.185760Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
High severity vulnerability that affects Microsoft.AspNetCore.Mvc
Details

See https://nvd.nist.gov/vuln/detail/CVE-2017-0249 & https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0249

Database specific
{
    "nvd_published_at": "2017-05-12T14:29:00Z",
    "github_reviewed_at": "2020-06-16T21:52:02Z",
    "severity": "HIGH",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-20"
    ]
}
References

Affected packages

NuGet / Microsoft.AspNetCore.Mvc

Package

Name
Microsoft.AspNetCore.Mvc
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc

Package

Name
Microsoft.AspNetCore.Mvc
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / Microsoft.AspNetCore.Mvc.Core

Package

Name
Microsoft.AspNetCore.Mvc.Core
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.Core

Package

Name
Microsoft.AspNetCore.Mvc.Core
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / System.Net.Http

Package

Name
System.Net.Http
View open source insights on deps.dev
Purl
pkg:nuget/System.Net.Http

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.1
Fixed
4.1.2

Affected versions

4.*

4.1.1

NuGet / System.Net.Http

Package

Name
System.Net.Http
View open source insights on deps.dev
Purl
pkg:nuget/System.Net.Http

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.3.1
Fixed
4.3.2

Affected versions

4.*

4.3.1

NuGet / System.Text.Encodings.Web

Package

Name
System.Text.Encodings.Web
View open source insights on deps.dev
Purl
pkg:nuget/System.Text.Encodings.Web

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.0.0
Fixed
4.0.1

Affected versions

4.*

4.0.0

NuGet / System.Text.Encodings.Web

Package

Name
System.Text.Encodings.Web
View open source insights on deps.dev
Purl
pkg:nuget/System.Text.Encodings.Web

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.3.0
Fixed
4.3.1

Affected versions

4.*

4.3.0

NuGet / System.Net.Http.WinHttpHandler

Package

Name
System.Net.Http.WinHttpHandler
View open source insights on deps.dev
Purl
pkg:nuget/System.Net.Http.WinHttpHandler

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.0.0
Fixed
4.0.1

Affected versions

4.*

4.0.0

NuGet / System.Net.Http.WinHttpHandler

Package

Name
System.Net.Http.WinHttpHandler
View open source insights on deps.dev
Purl
pkg:nuget/System.Net.Http.WinHttpHandler

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.3.0
Fixed
4.3.1

Affected versions

4.*

4.3.0

NuGet / System.Net.Security

Package

Name
System.Net.Security
View open source insights on deps.dev
Purl
pkg:nuget/System.Net.Security

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.0.0
Fixed
4.0.1

Affected versions

4.*

4.0.0

NuGet / System.Net.Security

Package

Name
System.Net.Security
View open source insights on deps.dev
Purl
pkg:nuget/System.Net.Security

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.3.0
Fixed
4.3.1

Affected versions

4.*

4.3.0

NuGet / System.Net.WebSockets.Client

Package

Name
System.Net.WebSockets.Client
View open source insights on deps.dev
Purl
pkg:nuget/System.Net.WebSockets.Client

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.0.0
Fixed
4.0.1

Affected versions

4.*

4.0.0

NuGet / System.Net.WebSockets.Client

Package

Name
System.Net.WebSockets.Client
View open source insights on deps.dev
Purl
pkg:nuget/System.Net.WebSockets.Client

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.3.0
Fixed
4.3.1

Affected versions

4.*

4.3.0

NuGet / Microsoft.AspNetCore.Mvc.Abstractions

Package

Name
Microsoft.AspNetCore.Mvc.Abstractions
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Abstractions

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.Abstractions

Package

Name
Microsoft.AspNetCore.Mvc.Abstractions
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Abstractions

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / Microsoft.AspNetCore.Mvc.ApiExplorer

Package

Name
Microsoft.AspNetCore.Mvc.ApiExplorer
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.ApiExplorer

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.ApiExplorer

Package

Name
Microsoft.AspNetCore.Mvc.ApiExplorer
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.ApiExplorer

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / Microsoft.AspNetCore.Mvc.Cors

Package

Name
Microsoft.AspNetCore.Mvc.Cors
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Cors

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.Cors

Package

Name
Microsoft.AspNetCore.Mvc.Cors
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Cors

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / Microsoft.AspNetCore.Mvc.DataAnnotations

Package

Name
Microsoft.AspNetCore.Mvc.DataAnnotations
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.DataAnnotations

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.DataAnnotations

Package

Name
Microsoft.AspNetCore.Mvc.DataAnnotations
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.DataAnnotations

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / Microsoft.AspNetCore.Mvc.Formatters.Json

Package

Name
Microsoft.AspNetCore.Mvc.Formatters.Json
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Formatters.Json

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.Formatters.Json

Package

Name
Microsoft.AspNetCore.Mvc.Formatters.Json
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Formatters.Json

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / Microsoft.AspNetCore.Mvc.Formatters.Xml

Package

Name
Microsoft.AspNetCore.Mvc.Formatters.Xml
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Formatters.Xml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.Formatters.Xml

Package

Name
Microsoft.AspNetCore.Mvc.Formatters.Xml
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Formatters.Xml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / Microsoft.AspNetCore.Mvc.Localization

Package

Name
Microsoft.AspNetCore.Mvc.Localization
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Localization

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.Localization

Package

Name
Microsoft.AspNetCore.Mvc.Localization
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Localization

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / Microsoft.AspNetCore.Mvc.Razor.Host

Package

Name
Microsoft.AspNetCore.Mvc.Razor.Host
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Razor.Host

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.Razor.Host

Package

Name
Microsoft.AspNetCore.Mvc.Razor.Host
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Razor.Host

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / Microsoft.AspNetCore.Mvc.Razor

Package

Name
Microsoft.AspNetCore.Mvc.Razor
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Razor

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.Razor

Package

Name
Microsoft.AspNetCore.Mvc.Razor
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.Razor

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / Microsoft.AspNetCore.Mvc.TagHelpers

Package

Name
Microsoft.AspNetCore.Mvc.TagHelpers
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.TagHelpers

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.TagHelpers

Package

Name
Microsoft.AspNetCore.Mvc.TagHelpers
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.TagHelpers

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / Microsoft.AspNetCore.Mvc.ViewFeatures

Package

Name
Microsoft.AspNetCore.Mvc.ViewFeatures
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.ViewFeatures

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.ViewFeatures

Package

Name
Microsoft.AspNetCore.Mvc.ViewFeatures
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.ViewFeatures

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / Microsoft.AspNetCore.Mvc.WebApiCompatShim

Package

Name
Microsoft.AspNetCore.Mvc.WebApiCompatShim
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.WebApiCompatShim

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.0.4

Affected versions

1.*

1.0.0
1.0.1
1.0.2
1.0.3

NuGet / Microsoft.AspNetCore.Mvc.WebApiCompatShim

Package

Name
Microsoft.AspNetCore.Mvc.WebApiCompatShim
View open source insights on deps.dev
Purl
pkg:nuget/Microsoft.AspNetCore.Mvc.WebApiCompatShim

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.1.0
Fixed
1.1.3

Affected versions

1.*

1.1.0
1.1.1
1.1.2

NuGet / DisCatSharp

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
9.8.3

Affected versions

9.*

9.5.8-nightly-00003
9.5.8-nightly-00004
9.5.8-nightly-00183
9.5.8-nightly-00184
9.5.8
9.6.0-nightly-00005
9.6.0-nightly-00008
9.6.0-nightly-00010
9.6.0-nightly-00011
9.6.0
9.6.1-nightly-00012
9.6.1-nightly-00015
9.6.1-nightly-00016
9.6.1-nightly-00017
9.6.1-nightly-00018
9.6.1
9.6.2-nightly-00019
9.6.2-nightly-00020
9.6.2-nightly-00022
9.6.2-nightly-00023
9.6.2-nightly-00025
9.6.2-nightly-00026
9.6.2-nightly-00027
9.6.2-nightly-00028
9.6.2-nightly-00029
9.6.2-nightly-00030
9.6.2
9.6.3-nightly-00034
9.6.3-nightly-00035
9.6.3-nightly-00036
9.6.3-nightly-00037
9.6.3-nightly-00038
9.6.3-nightly-00039
9.6.3-nightly-00041
9.6.3-nightly-00042
9.6.3-nightly-00043
9.6.3-nightly-00044
9.6.3-nightly-00045
9.6.3-nightly-00046
9.6.3-nightly-00047
9.6.3-nightly-00048
9.6.3-nightly-00049
9.6.3-nightly-00050
9.6.3-nightly-00051
9.7.0-nightly-00054
9.7.0-nightly-00055
9.7.0-nightly-00056
9.7.0-nightly-00057
9.7.0-nightly-00058
9.7.0-nightly-00059
9.7.0
9.8.0-nightly-00062
9.8.0
9.8.1-nightly-00063
9.8.1-nightly-00064
9.8.1-nightly-00066
9.8.1-nightly-00067
9.8.1-nightly-00068
9.8.1-nightly-00069
9.8.1-nightly-00070
9.8.2-nightly-00076
9.8.2-nightly-00077
9.8.2-nightly-00078
9.8.2-nightly-00079
9.8.2-nightly-00080
9.8.2-nightly-00081
9.8.2-nightly-00082
9.8.2-nightly-00083
9.8.2-nightly-00084
9.8.2-nightly-00085
9.8.2-nightly-00086
9.8.2-nightly-00087
9.8.2-nightly-00088
9.8.2-nightly-00089
9.8.2-nightly-00090
9.8.2-nightly-00091
9.8.2-nightly-00092
9.8.2-nightly-00095
9.8.2-nightly-00096
9.8.2-nightly-00098
9.8.2
9.8.3-nightly-00099
9.8.3-nightly-00100
9.8.3-nightly-00101
9.8.3-nightly-00102
9.8.3-nightly-00103
9.8.3-nightly-00104
9.8.3-nightly-00105
9.8.3-nightly-00106
9.8.3-nightly-00110
9.8.3-nightly-00111
9.8.3-nightly-00113
9.8.3-nightly-00114
9.8.3-nightly-00115
9.8.3-nightly-00116
9.8.3-nightly-00117
9.8.3-nightly-00118
9.8.3-nightly-00119
9.8.3-nightly-00121
9.8.3-nightly-00122
9.8.3-nightly-00123
9.8.3-nightly-00124
9.8.3-nightly-00125
9.8.3-nightly-00126
9.8.3-nightly-00127
9.8.3-nightly-00128
9.8.3-nightly-00129
9.8.3-nightly-00130
9.8.3-nightly-00131
9.8.3-nightly-00132
9.8.3-nightly-00133
9.8.3-nightly-00134
9.8.3-nightly-00135
9.8.3-nightly-00136
9.8.3-nightly-00137
9.8.3-nightly-00138
9.8.3-nightly-00139
9.8.3-nightly-00140
9.8.3-nightly-00141
9.8.3-nightly-00142
9.8.3-nightly-00143
9.8.3-nightly-00146
9.8.3-nightly-00147
9.8.3-nightly-00149
9.8.3