CVE:CVE-2021-31957
CNNVD:CNNVD-202106-495
Microsoft ASP.NET Core是美国微软（Microsoft）公司的一框跨平台开源框架。该框架用于构建Web应用、物联网应用和移动后端等基于云的应用程序。
Microsoft ASP.NET Core存在输入验证错误漏洞。以下产品和版本受到影响：Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3),Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6),Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8),Microsoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9),Visual Studio 2019 for Mac version 8.10,.NET Core 3.1,.NET 5.0,
solution:Upgrade microsoft .net to a higher version than 5.0.6,and avoid the version [5.0,5.0.6]; Upgrade microsoft .net_core to a higher version than 3.1.15,and avoid the version [3.1,3.1.15]; Upgrade microsoft visual_studio_2019 to a higher version than 16.10,8.10,and avoid the version [16.0,16.10],8.10; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34