Improper Input Validation
CVE-2017-0249
Summary
An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
- LOW
- NETWORK
- LOW
- UNCHANGED
- NONE
- NONE
- LOW
- LOW
CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Advisory Timeline
- Published