description: An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'.
problem types: Elevation of Privilege
affected:
{
product: ASP.NET Core
vendor: Microsoft
versions:
status: affected, version: 2.1
status: affected, version: 2.2
status: affected, version: 3.0
}