CVE-2023-35391 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

...

CVE-2023-35391

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure. Exploiting this vulnerability allows an attacker to listen to any group or user with a specially crafted group or username and receive messages for groups they are unauthorized to view. Remediation Upgrade...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure. Exploiting this vulnerability allows an attacker to listen to any group or user with a specially crafted group or username and receive messages for groups they are unauthorized to view. Remediation Upgrade...

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

...

CVE-2023-35391

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability...

PT-2023-4295 · Microsoft +1 · Asp.Net Core Signalr +2

Name of the Vulnerable Software and Affected Versions: ASP.NET Core SignalR and Visual Studio affected versions not specified Description: The issue is related to insufficient access control in the software development tool Microsoft Visual Studio and the Microsoft .NET platform. This can...

MAL-2023-805 Malicious code in sssssssignalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15cc23bf354e5520194687388c9f9fedf32c28fbdd1bdaeb8abb7a0b1943f352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sssssssignalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15cc23bf354e5520194687388c9f9fedf32c28fbdd1bdaeb8abb7a0b1943f352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-776 Malicious code in signalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001810ee89c4e150cce7a1b0e7aef619fc71752b514250543e9e7adbef908c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in signalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001810ee89c4e150cce7a1b0e7aef619fc71752b514250543e9e7adbef908c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bmw-chris/signalr-default-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55f1ea95b0dd1fab3c5fd07a895d013eadc38233dd31acbf4d5640965da83210 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-signalr-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cac0476e730ced0efec0aee283995a531bf62aca080c7cd7972ed59db8d6714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1287 Malicious code in azure-arm-signalr-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cac0476e730ced0efec0aee283995a531bf62aca080c7cd7972ed59db8d6714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CentOS 8 : .NET Core on Red Hat Enterprise Linux (CESA-2020:0130)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0130 advisory. - dotnet: Denial of service via backpressure issue CVE-2020-0602 - dotnet: Memory Corruption in SignalR CVE-2020-0603 Note that Nessus has not tested f...

Critical: Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security and bug fix update

An update for rh-dotnet30-dotnet and rh-dotnet31-dotnet is now available for .NET Core on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

dotnet: Memory Corruption in SignalR

A memory corruption flaw was found in ASP.NET core. A client can write to freed memory on the server which could result in undefined behavior. An unauthenticated, remote attacker could exploit this vulnerability to execute arbitrary code by sending specially crafted requests to an ASP.NET Core...

Critical: Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security and bug fix update

An update for dotnet3.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

dotnet: Memory Corruption in SignalR

A memory corruption flaw was found in ASP.NET core. A client can write to freed memory on the server which could result in undefined behavior. An unauthenticated, remote attacker could exploit this vulnerability to execute arbitrary code by sending specially crafted requests to an ASP.NET Core...

Denial Of Service (DoS)

ASP.NET Core is vulnerable to denial of service. Improper handling of web requests allows a remote attacker to cause a denial of service condition in the application via vectors related to SignalR...