CWE Code: 601
Vulnerability Type: privilege_escalation
CVSS Score: 4.3
CWE Name:  URL Redirection to Untrusted Site ('Open Redirect')
Summary: asp.net core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted url aka "asp.net core elevation of privilege vulnerability".
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2017-11-15
Last Modified Date: 2018-02-01