| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.AspNetCore.All | ≥ 2.0.0, < 2.0.3 | 2.0.3 |
| Microsoft.AspNetCore.Mvc.Core | ≥ 2.0.0, < 2.0.1 | 2.0.1 |
| asp.net core | = 2.0 |
ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free