{"id":"CVE-2019-1075","details":"A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.","aliases":["GHSA-prrf-397v-83xh"],"modified":"2026-07-08T15:54:15.452467Z","published":"2019-07-15T19:15:17.343Z","references":[{"type":"FIX","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1075"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/dotnet/aspnetcore","events":[{"introduced":"00e08d8c11f4e9649492342c9c613a758efd2e4d"},{"last_affected":"ce8cf65589734f82b0536c543aba5bd60d0a5a98"}],"database_specific":{"cpe":["cpe:2.3:a:microsoft:asp.net_core:2.1:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:asp.net_core:2.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.1"},{"last_affected":"2.1"},{"introduced":"2.2"},{"last_affected":"2.2"}],"source":"CPE_STRING"}}],"versions":["2.1","2.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-1075.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}