CVE-2021-34532

Description

ASP.NET Core and Visual Studio Information Disclosure Vulnerability

Affected packages (2)

• Bitnami/aspnet-core>= 2.1.0, < 2.1.3, >= 3.1.0, < 3.1.18, >= 5.0.0, < 5.0.9
• NuGet/Microsoft.AspNetCore.Authentication.JwtBearer>= 2.1.0, < 2.1.29

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-34532
• PATCHhttps://github.com/dotnet/aspnetcore
• WEBhttps://github.com/dotnet/aspnetcore/security/advisories/GHSA-q7cg-43mg-qp69
• WEBhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34532