High severity7.5NVD Advisory· Published Mar 14, 2018· Updated Jun 17, 2026

CVE-2018-0808

Description

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784.

Affected products

Microsoft/Aspnetcorellm-create
Range: 1.0, 1.1, 2.0
Microsoft Corporation/ASP.NET Corev5
Range: ASP.NET Core 1.0. 1.1, and 2.0

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0808nvdPatchVendor Advisory
www.securityfocus.com/bid/103226nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040504nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000