VYPR
← All advisories
High severity7.5NVD Advisory· Published Jan 8, 2019· Updated Jun 17, 2026

CVE-2019-0545

CVE-2019-0545

Description

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
Microsoft.NETCore.AppNuGet
>= 2.1.0, < 2.1.72.1.7
Microsoft.NETCore.AppNuGet
>= 2.2.0, < 2.2.12.2.1

Affected products

16
  • ghsa-coords
    pkg:nuget/microsoft.netcore.app
    Range: >= 2.1.0, < 2.1.7
  • Microsoft/.net Framework11 versions
    cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*
  • Microsoft/.net Core2 versions
    cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_core:2.2:*:*:*:*:*:*:*
  • Microsoft/Chart Control For Microsoft .net Frameworkcpe-rescue
    Range: 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
  • Microsoft/Aspnetcorecpe-rescue
    Range: 2.1

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.