.NET Information Disclosure Vulnerability

🗓️ 11 Aug 2023 20:54:45Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 68 Views

.NET Information Disclosure Vulnerability in ASP.NET Core 2.1, .NET 6.0 and, .NET 7.

Reporter	Title	Published	Views	Family All 72
ATTACKERKB	CVE-2023-35391	8 Aug 202319:15	–	attackerkb
AlpineLinux	CVE-2023-35391	8 Aug 202318:52	–	alpinelinux
CNNVD	Microsoft ASP.NET Core and Visual Studio Security Vulnerabilities	8 Aug 202300:00	–	cnnvd
CVE	CVE-2023-35391	8 Aug 202318:52	–	cve
Cvelist	CVE-2023-35391 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability	8 Aug 202318:52	–	cvelist
IBM Security Bulletins	Security Bulletin: A vulnerability in Microsoft ASP.NET Core may affect IBM Robotic Process Automation and result in an exposure of sensitive information (CVE-2023-35391).	20 Sep 202314:09	–	ibm
EUVD	EUVD-2023-2314	3 Oct 202520:07	–	euvd
Microsoft KB	.NET 6.0 Update - August 8, 2023 (KB5029688)	8 Aug 202307:00	–	mskb
Microsoft KB	.NET 7.0 Update - August 8, 2023 (KB5029689)	8 Aug 202307:00	–	mskb
Kaspersky	KLA51717 Multiple vulnerabilities in Microsoft Developer Tools	8 Aug 202300:00	–	kaspersky

Vulners

Node

microsoft aspnetcore.signalr.redisRange<1.0.40nuget

OR

microsoft aspnetcore.signalr.stackexchangeredisRange6.0.0–6.0.20nuget

OR

microsoft aspnetcore.signalr.stackexchangeredisRange7.0.0–7.0.9nuget

Source	Link
github	www.github.com/dotnet/aspnetcore/security/advisories/GHSA-j8rm-cm55-qqj6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-35391
github	www.github.com/dotnet/announcements/issues/267
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35391
github	www.github.com/advisories/GHSA-j8rm-cm55-qqj6

04 Nov 2023 05:05Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.2 - 7.5

EPSS0.02589

SSVC

microsoft asp.net signalr information disclosure redis vulnerability patching update sdk runtime