Exploit for Generation of Error Message Containing Sensitive Information in Microsoft

🗓️ 11 Mar 2024 10:14:39Reported by codewhitesecType

githubexploit

githubexploit🔗 github.com👁 153 Views

Explains ObjRef leaks and an HTTP .NET Remoting exploit that reveals sensitive error messages.

Reporter	Title	Published	Views	Family All 38
ATTACKERKB	CVE-2024-29059	23 Mar 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Microsoft .NET Framework software platform, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.	27 Mar 202400:00	–	bdu_fstec
Circl	CVE-2024-29059	25 Mar 202413:00	–	circl
CISA KEV Catalog	Microsoft .NET Framework Information Disclosure Vulnerability	4 Feb 202500:00	–	cisa_kev
CISA	CISA Adds Four Known Exploited Vulnerabilities to Catalog	4 Feb 202512:00	–	cisa
CNNVD	Microsoft .NET Framework 安全漏洞	22 Mar 202400:00	–	cnnvd
CVE	CVE-2024-29059	22 Mar 202423:09	–	cve
Cvelist	CVE-2024-29059 .NET Framework Information Disclosure Vulnerability	22 Mar 202423:09	–	cvelist
Hacker One	U.S. Dept Of Defense: [███] .NET Framework ObjRefs Disclosure (CVE-2024-29059)	19 Apr 202415:48	–	hackerone
Microsoft KB	January 9, 2024-KB5033910 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016	22 Mar 202407:00	–	mskb

13 May 2025 09:40Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

EPSS0.93577

objref leaks http dotnet remoting sensitive error messages deserialization payload vulnerability details exploit guide