Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

microsoft.aspnetcore.mvc.localization

Source -

NVD

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

3
Related CVEsRelated VendorsRelated AssignersReports
3Vulnerabilities found
CVE-2017-0247
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-7.5||HIGH
EPSS-16.91% / 96.72%
||
7 Day CHG~0.00%
Published-12 May, 2017 | 14:00
Updated-13 May, 2026 | 00:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc before 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to cause a denial of service by leveraging failure to properly calculate the length of 4-byte characters in the Unicode Non-Character range.

Action-Not Available
Vendor-Microsoft Corporation
Product-microsoft.aspnetcore.mvc.formatters.jsonmicrosoft.aspnetcore.mvc.localizationmicrosoft.aspnetcore.mvc.corsmicrosoft.aspnetcore.mvc.formatters.xmlmicrosoft.aspnetcore.mvc.razor.hostmicrosoft.aspnetcore.mvc.webapicompatshimsystem.net.http.winhttphandlermicrosoft.aspnetcore.mvc.apiexplorermicrosoft.aspnetcore.mvc.viewfeaturessystem.net.websockets.clientasp.net_model_view_controllermicrosoft.aspnetcore.mvc.taghelpersmicrosoft.aspnetcore.mvc.abstractionssystem.net.securitymicrosoft.aspnetcore.mvc.dataannotationssystem.net.httpsystem.text.encodings.webmicrosoft.aspnetcore.mvc.razorASP.NET Core
CWE ID-CWE-20
Improper Input Validation
CVE-2017-0249
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-7.3||HIGH
EPSS-4.17% / 89.79%
||
7 Day CHG~0.00%
Published-12 May, 2017 | 14:00
Updated-13 May, 2026 | 00:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

Action-Not Available
Vendor-Microsoft Corporation
Product-microsoft.aspnetcore.mvc.formatters.jsonmicrosoft.aspnetcore.mvc.localizationmicrosoft.aspnetcore.mvc.corsmicrosoft.aspnetcore.mvc.formatters.xmlmicrosoft.aspnetcore.mvc.razor.hostmicrosoft.aspnetcore.mvc.webapicompatshimsystem.net.http.winhttphandlermicrosoft.aspnetcore.mvc.apiexplorermicrosoft.aspnetcore.mvc.viewfeaturessystem.net.websockets.clientasp.net_model_view_controllermicrosoft.aspnetcore.mvc.taghelpersmicrosoft.aspnetcore.mvc.abstractionssystem.net.securitymicrosoft.aspnetcore.mvc.dataannotationssystem.net.httpsystem.text.encodings.webmicrosoft.aspnetcore.mvc.razorASP.NET Core
CWE ID-CWE-20
Improper Input Validation
CVE-2017-0256
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-5.3||MEDIUM
EPSS-3.54% / 88.01%
||
7 Day CHG~0.00%
Published-12 May, 2017 | 14:00
Updated-13 May, 2026 | 00:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

Action-Not Available
Vendor-Microsoft Corporation
Product-microsoft.aspnetcore.mvc.formatters.jsonmicrosoft.aspnetcore.mvc.localizationmicrosoft.aspnetcore.mvc.corsmicrosoft.aspnetcore.mvc.formatters.xmlmicrosoft.aspnetcore.mvc.razor.hostmicrosoft.aspnetcore.mvc.webapicompatshimsystem.net.http.winhttphandlermicrosoft.aspnetcore.mvc.apiexplorermicrosoft.aspnetcore.mvc.viewfeaturessystem.net.websockets.clientasp.net_model_view_controllermicrosoft.aspnetcore.mvc.taghelpersmicrosoft.aspnetcore.mvc.abstractionssystem.net.securitymicrosoft.aspnetcore.mvc.dataannotationssystem.net.httpsystem.text.encodings.webmicrosoft.aspnetcore.mvc.razorASP.NET Core
CWE ID-CWE-20
Improper Input Validation