CVE-2023-36558

Description

ASP.NET Core Security Feature Bypass Vulnerability

Affected packages (4)

• Bitnami/aspnet-core>= 6.0.0, < 6.0.25, >= 7.0.0, < 7.0.14, >= 8.0.0, < 8.0.1
• Bitnami/dotnet>= 6.0.0, < 6.0.25, >= 7.0.0, < 7.0.14
• Bitnami/dotnet-sdk>= 6.0.0, < 6.0.25, >= 7.0.0, < 7.0.14
• NuGet/Microsoft.AspNetCore.Components>= 8.0.0-rc.2.23480.2, < 8.0.0

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-36558
• PATCHhttps://github.com/dotnet/runtime
• WEBhttps://github.com/dotnet/announcements/issues/288
• WEBhttps://github.com/dotnet/runtime/security/advisories/GHSA-3fx3-85r4-8j3w
• WEBhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36558