Security Bypass

🗓️ 15 Nov 2023 09:57:15Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

Microsoft.AspNetCore.Components vulnerability, unauthenticated user bypasses server validatio

Reporter	Title	Published	Views	Family All 156
Tenable Nessus	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-457)	15 Dec 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : dotnet8.0 (ALSA-2023:7253)	16 Nov 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : dotnet7.0 (ALSA-2023:7255)	16 Nov 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : dotnet6.0 (ALSA-2023:7257)	16 Nov 202300:00	–	nessus
Tenable Nessus	MiracleLinux 9 : dotnet7.0-7.0.114-1.el9_3.ML.1 (AXSA:2023-7071:33)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 9 : dotnet6.0-6.0.125-1.el9_3.ML.1 (AXSA:2023-7090:29)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : dotnet7.0-7.0.114-1.el8.ML.1 (AXSA:2024-7360:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : dotnet6.0-6.0.125-1.el8.ML.1 (AXSA:2024-7361:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : dotnet8.0-8.0.100-2.el8.ML.1 (AXSA:2024-7380:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 9 : dotnet8.0-8.0.100-2.el9_3.ML.1 (AXSA:2024-7409:03)	20 Jan 202600:00	–	nessus

Vulners

Node

dotnet6-runtime dotnet6-runtimeMatch6.0.9-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.11-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r2csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.5-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.8-r3csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.7-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.22-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.24-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r4csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.3-r3csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.10-r2csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.10-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.19-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.4-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.8-r2csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.20-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.5-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.15-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.23-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.13-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.8-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.21-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.14-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.2-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r3csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.3-r2csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.10-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.3-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.12-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.6-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.18-r0csharp

AND

alpinelinux alpine_linuxMatchedge

OR

dotnet6-build dotnet6-buildMatch6.0.108-r3csharp

AND

dotnet6-build dotnet6-buildMatch6.0.108-r1csharp

AND

dotnet6-build dotnet6-buildMatch6.0.111-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.114-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.113-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.115-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.103-r3csharp

AND

dotnet6-build dotnet6-buildMatch6.0.108-r2csharp

AND

dotnet6-build dotnet6-buildMatch6.0.102-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.110-r1csharp

AND

dotnet6-build dotnet6-buildMatch6.0.116-r1csharp

AND

dotnet6-build dotnet6-buildMatch6.0.103-r2csharp

AND

dotnet6-build dotnet6-buildMatch6.0.105-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.109-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.110-r2csharp

AND

dotnet6-build dotnet6-buildMatch6.0.110-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.112-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.116-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.106-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.103-r1csharp

AND

dotnet6-build dotnet6-buildMatch6.0.107-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.104-r1csharp

AND

alpinelinux alpine_linuxMatchedge

OR

dotnet7-runtime dotnet7-runtimeMatch7.0.4-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.0-r2csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.12-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.2-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r4csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.10-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.1-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.9-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.3-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r1csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.11-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.7-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.8-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.0-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r2csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.13-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.0-r3csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r3csharp

AND

alpinelinux alpine_linuxMatchedge

OR

dotnet7-build dotnet7-buildMatch7.0.105-r1csharp

AND

dotnet7-build dotnet7-buildMatch7.0.100-r3csharp

AND

dotnet7-build dotnet7-buildMatch7.0.104-r0csharp

AND

dotnet7-build dotnet7-buildMatch7.0.102-r0csharp

AND

dotnet7-build dotnet7-buildMatch7.0.105-r2csharp

AND

dotnet7-build dotnet7-buildMatch7.0.103-r0csharp

AND

dotnet7-build dotnet7-buildMatch7.0.101-r0csharp

AND

dotnet7-build dotnet7-buildMatch7.0.105-r0csharp

AND

alpinelinux alpine_linuxMatchedge

OR

dotnet6-runtime dotnet6-runtimeMatch6.0.23-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.18-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r2csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.22-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.24-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.20-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r3csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.21-r0csharp

AND

alpinelinux alpine_linuxMatch3.18

OR

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r1csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.11-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.9-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.10-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.13-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r2csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.12-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.7-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r3csharp

AND

alpinelinux alpine_linuxMatch3.18

OR

microsoft.aspnetcore.components microsoft.aspnetcore.componentsRange3.0.0-preview3-19153-02–6.0.24csharp

OR

microsoft.aspnetcore.components microsoft.aspnetcore.componentsRange7.0.0-preview.1.22109.13–7.0.13csharp

OR

microsoft.aspnetcore.components microsoft.aspnetcore.componentsRange8.0.0-preview.1.23112.2–8.0.0-rc.2.23480.2csharp

Source	Link
github	www.github.com/advisories/GHSA-3fx3-85r4-8j3w
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36558

01 Jan 2025 06:24Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.5 - 6.2

EPSS0.01085

SSVC

microsoft.aspnetcore.components vulnerability unauthenticated user server validation