Denial of Service Vulnerability in ASP.NET Core by Microsoft
CVE-2019-0815
7.5HIGH
Summary
A vulnerability exists in ASP.NET Core that could allow an attacker to cause a denial of service condition. This issue arises when ASP.NET Core improperly handles incoming web requests, potentially leading to application downtime. Organizations using affected versions of ASP.NET Core should ensure timely updates to mitigate these risks and maintain the availability of their web applications.
Affected Version(s)
ASP.NET Core 2.2
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved