{"api_version":"1","generated_at":"2026-07-23T05:40:36+00:00","cve":"CVE-2018-0787","urls":{"html":"https://cve.report/CVE-2018-0787","api":"https://cve.report/api/cve/CVE-2018-0787.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2018-0787","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-0787"},"summary":{"title":"CVE-2018-0787","description":"ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka \"ASP.NET Core Elevation Of Privilege Vulnerability\".","state":"PUBLIC","assigner":"secure@microsoft.com","published_at":"2018-03-14 17:29:00","updated_at":"2018-04-11 15:07:00"},"problem_types":["CWE-640"],"metrics":[],"references":[{"url":"http://www.securitytracker.com/id/1040525","name":"1040525","refsource":"SECTRACK","tags":["Third Party Advisory","VDB Entry"],"title":"ASP.NET Kestrel Web Application HTML Injection Flaw Lets Remote Users Reset the Target User's Password - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/aspnet/Announcements/issues/295","name":"https://github.com/aspnet/Announcements/issues/295","refsource":"CONFIRM","tags":["Technical Description","Third Party Advisory"],"title":"Microsoft Security Advisory CVE-2018-0787: ASP.NET Core Elevation Of Privilege Vulnerability · Issue #295 · aspnet/Announcements · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/103282","name":"103282","refsource":"BID","tags":["Third Party Advisory","VDB Entry"],"title":"Microsoft ASP.NET Core CVE-2018-0787 Remote Privilege Escalation Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0787","name":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0787","refsource":"CONFIRM","tags":["Patch","Vendor Advisory"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-0787","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0787","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2018","cve_id":"787","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"asp.net_core","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"787","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"asp.net_core","cpe6":"1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"787","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"asp.net_core","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"787","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"asp.net_core","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"787","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"asp.net_core","cpe6":"1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"787","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"asp.net_core","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2018-0787","qid":"981395","title":"Dotnet (nuget) Security Update for Microsoft.AspNetCore.Server.Kestrel.Core (GHSA-365p-96qv-xr7g)"}]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"secure@microsoft.com","DATE_PUBLIC":"2018-03-14T00:00:00","ID":"CVE-2018-0787","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"ASP.NET Core","version":{"version_data":[{"version_value":"ASP.NET Core 1.0. 1.1, and 2.0"}]}}]},"vendor_name":"Microsoft Corporation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka \"ASP.NET Core Elevation Of Privilege Vulnerability\"."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Elevation of Privilege"}]}]},"references":{"reference_data":[{"name":"1040525","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1040525"},{"name":"https://github.com/aspnet/Announcements/issues/295","refsource":"CONFIRM","url":"https://github.com/aspnet/Announcements/issues/295"},{"name":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0787","refsource":"CONFIRM","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0787"},{"name":"103282","refsource":"BID","url":"http://www.securityfocus.com/bid/103282"}]}},"nvd":{"publishedDate":"2018-03-14 17:29:00","lastModifiedDate":"2018-04-11 15:07:00","problem_types":["CWE-640"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"severity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:microsoft:asp.net_core:1.0:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:microsoft:asp.net_core:1.1:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:microsoft:asp.net_core:2.0:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2018","CveId":"787","Ordinal":"115727","Title":"CVE-2018-0787","CVE":"CVE-2018-0787","Year":"2018"},"notes":[{"CveYear":"2018","CveId":"787","Ordinal":"1","NoteData":"ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka \"ASP.NET Core Elevation Of Privilege Vulnerability\".","Type":"Description","Title":null},{"CveYear":"2018","CveId":"787","Ordinal":"2","NoteData":"2018-03-14","Type":"Other","Title":"Published"},{"CveYear":"2018","CveId":"787","Ordinal":"3","NoteData":"2018-03-15","Type":"Other","Title":"Modified"}]}}}