description: ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".
problem types: Elevation of Privilege
affected:
{
product: ASP.NET Core
vendor: Microsoft Corporation
versions:
status: affected, version: ASP.NET Core 2.0
}