An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow access to cached files, aka 'ASP.NET and .NET Elevation of Privilege Vulnerability'.

Related CVEs

CVE-2020-1476

Key Information

GHSA ID

GHSA-8m4h-93rx-x9x3

Published

May 24, 2022 5:25 PM

Last Modified

January 4, 2024 3:30 AM

CVSS Score

2.5 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: November 25, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.