| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.AspNetCore.Mvc | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.Abstractions | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.ApiExplorer | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.Core | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.Cors | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.DataAnnotations | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.Formatters.Json | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.Formatters.Xml | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.Localization | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.Razor | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.Razor.Host | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.TagHelpers | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.ViewFeatures | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| Microsoft.AspNetCore.Mvc.WebApiCompatShim | ≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.3 | 1.0.41.1.3 |
| System.Net.Http | ≥ 4.1.1, < 4.1.2≥ 4.3.1, < 4.3.2 | 4.1.24.3.2 |
| System.Net.Http.WinHttpHandler | ≥ 4.0.0, < 4.0.1≥ 4.3.0, < 4.3.1 | 4.0.14.3.1 |
| System.Net.Security | ≥ 4.0.0, < 4.0.1≥ 4.3.0, < 4.3.1 | 4.0.14.3.1 |
| System.Net.WebSockets.Client | ≥ 4.0.0, < 4.0.1≥ 4.3.0, < 4.3.1 | 4.0.14.3.1 |
| System.Text.Encodings.Web | ≥ 4.0.0, < 4.0.1≥ 4.3.0, < 4.3.1 | 4.0.14.3.1 |
| .net framework | = 2.0= 3.5= 3.5.1= 4.5.2= 4.6= 4.6.1= 4.6.2= 4.7 |
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free