Title

Microsoft ASP.NET Core MVC Denial of Service Vulnerability (Cat I impact)

Discussion

Microsoft is releasing this security advisory to provide information about a vulnerability in the public versions of ASP.NET Core MVC 1.1.0. To exploit this vulnerability, an attacker would send a malicious HTTP request to an affected ASP.NET site. If successfully exploited, an attacker would cause a denial of service condition.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-73907

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.