| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.AspNetCore.All | ≥ 2.1.0, < 2.1.12≥ 2.2.0, < 2.2.6 | 2.1.122.2.6 |
| Microsoft.AspNetCore.App | ≥ 2.1.0, < 2.1.12≥ 2.2.0, < 2.2.6 | 2.1.122.2.6 |
| Microsoft.AspNetCore.Server.HttpSys | ≥ 2.1.0, < 2.1.12≥ 2.2.0, < 2.2.6 | 2.1.122.2.6 |
| Microsoft.AspNetCore.Server.IIS | ≥ 2.2.0, < 2.2.6 | 2.2.6 |
| asp.net core | = 2.1= 2.2 |
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free