CVE-2018-0785: Cross-Site Request Forgery (CSRF)

January 10, 2018 (updated February 1, 2018)

ASP.NET Core allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka “ASP.NET Core Cross Site Request Forgery Vulnerability”.

References

www.securityfocus.com/bid/102379
www.securitytracker.com/id/1040151
nvd.nist.gov/vuln/detail/CVE-2018-0785
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0785

Code Behaviors & Features

Detect and mitigate CVE-2018-0785 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →