HighCVSS 7.3
EPSS 4.2%
An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
Product
microsoft.aspnetcore.mvc.dataannotations vulnerabilities
3 published CVES affecting microsoft.aspnetcore.mvc.dataannotations, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 2
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest microsoft.aspnetcore.mvc.dataannotations CVEs
Newest publication first
-
-
MediumCVSS 5.3 EPSS 3.5%
A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
-
HighCVSS 7.5 EPSS 16.9%
A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.