High, CVSS 7.5NuGetPublished
Denial of service in ASP.NET Core
CVE-2018-8269 · GHSA-mv2r-q4g5-j8q5
- Affected
- NuGet microsoft.data.odata < 5.8.4
- Fixed in
- 5.8.4· Vendor fix available
- Issue
- A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.
Recommended action: Upgrade to 5.8.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.