U.S. Dept Of Defense: [███] .NET Framework ObjRefs Disclosure (CVE-2024-29059)

🗓️ 19 Apr 2024 15:48:01Reported by xchopathType

hackerone

hackerone🔗 hackerone.com👁 5 Views

Defense reports dotnet framework object reference URIs disclosure could enable remote attackers to access data.

Reporter	Title	Published	Views	Family All 38
ATTACKERKB	CVE-2024-29059	23 Mar 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Microsoft .NET Framework software platform, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.	27 Mar 202400:00	–	bdu_fstec
Circl	CVE-2024-29059	25 Mar 202413:00	–	circl
CISA KEV Catalog	Microsoft .NET Framework Information Disclosure Vulnerability	4 Feb 202500:00	–	cisa_kev
CISA	CISA Adds Four Known Exploited Vulnerabilities to Catalog	4 Feb 202512:00	–	cisa
CNNVD	Microsoft .NET Framework 安全漏洞	22 Mar 202400:00	–	cnnvd
CVE	CVE-2024-29059	22 Mar 202423:09	–	cve
Cvelist	CVE-2024-29059 .NET Framework Information Disclosure Vulnerability	22 Mar 202423:09	–	cvelist
GithubExploit	Exploit for Generation of Error Message Containing Sensitive Information in Microsoft	11 Mar 202410:14	–	githubexploit
Microsoft KB	January 9, 2024-KB5033910 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016	22 Mar 202407:00	–	mskb

12 Jan 2026 19:38Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.93577

SSVC

dotnet framework object reference uris remote attacks