ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-35391US | high7.5 | — | ||
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CVE-2023-35391 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability - CSAFself
- CVE-2023-35391 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability - HTMLself
- Microsoft Support Lifecycleexternal
- Common Vulnerability Scoring Systemexternal
- Microsoft Exploitability Indexexternal
Behebungen (6)
- Behoben.NET 6.0
6.0.21:Security Update:https://support.microsoft.com/help/5029688
https://support.microsoft.com/help/5029688 - Behoben.NET 7.0
7.0.10:Security Update:https://support.microsoft.com/help/5029689
https://support.microsoft.com/help/5029689 - BehobenASP.NET Core 2.1
2.1.40:Security Update:https://github.com/dotnet/announcements/issues/XXX
https://github.com/dotnet/announcements/issues/XXX - BehobenMicrosoft Visual Studio 2022 version 17.2
17.2.18:Security Update:https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes
https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes - BehobenMicrosoft Visual Studio 2022 version 17.4
17.4.10:Security Update:https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes - BehobenMicrosoft Visual Studio 2022 version 17.6
17.6.6:Security Update:https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan