ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".
{ "nvd_published_at": "2017-11-15T03:29:00Z", "github_reviewed_at": "2022-07-08T19:22:46Z", "severity": "HIGH", "github_reviewed": true, "cwe_ids": [] }