Description An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. Remediation References CVE-2017-0249 Related Vulnerabilities WordPress Plugin WP Gravity Forms Zoho CRM Add-on Cross-Site Scripting (1.1.5) Moodle Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2016-5013) WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.13) RubyGems Other Vulnerability (CVE-2012-2125) e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4083) Severity High Classification CVE-2017-0249 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Tags Missing Update Known Vulnerabilities