Sensitive information sent insecurely In system.net.http
Description
.NET Core Information Disclosure An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 nuget | 4.3.4 | ||
nuget | 2.1.1 |
Aliases
1. 2. 3. 4. 5. 6.
References
1. 2. 3.