Description An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. Remediation References CVE-2017-0249 Related Vulnerabilities WordPress Plugin wpForo Forum Cross-Site Scripting (1.4.11) phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4348) WordPress Plugin WooCommerce Cross-Site Scripting (2.6.8) Oracle Database Server CVE-2015-2585 Vulnerability (CVE-2015-2585) Apache Tomcat version older than 6.0.36 Severity High Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Tags Missing Update Known Vulnerabilities CWE-20 CVE-2017-0249