CVE-2018-0785: Microsoft ASP.NET Core

Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days.

ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability".

Affected products

• Microsoft ASP.NET Core: version 2.0 only

Published 2018-01-10. Last modified 2026-06-17.