CVE-2017-0249

EPSS

4.2% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)

CWE

CWE-20

Published

2017-05-12

Modified

2026-06-17

Record from

the NVD, synced 2026-10-19

Affected

• microsoft:asp.net_model_view_controller
• microsoft:microsoft.aspnetcore.mvc.abstractions
• microsoft:microsoft.aspnetcore.mvc.apiexplorer
• microsoft:microsoft.aspnetcore.mvc.cors
• microsoft:microsoft.aspnetcore.mvc.dataannotations
• microsoft:microsoft.aspnetcore.mvc.formatters.json
• microsoft:microsoft.aspnetcore.mvc.formatters.xml
• microsoft:microsoft.aspnetcore.mvc.localization
• microsoft:microsoft.aspnetcore.mvc.razor
• microsoft:microsoft.aspnetcore.mvc.razor.host
• microsoft:microsoft.aspnetcore.mvc.taghelpers
• microsoft:microsoft.aspnetcore.mvc.viewfeatures
• microsoft:microsoft.aspnetcore.mvc.webapicompatshim
• microsoft:system.net.http
• microsoft:system.net.http.winhttphandler
• microsoft:system.net.security
• microsoft:system.net.websockets.client
• microsoft:system.text.encodings.web

References

• https://github.com/aspnet/Announcements/issues/239
• https://github.com/aspnet/Announcements/issues/239

Check your stackJSON