CVE-2023-36049

HIGH7.6EPSS 2.1%

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

發布日:2023/11/14修改日:2025/5/20

也稱為:GHSA-c3hf-8vgx-72rhBIT-dotnet-2023-36049BIT-dotnet-sdk-2023-36049

描述

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

受影響套件(3)

Bitnami/dotnet>= 6.0.0, < 6.0.25, >= 7.0.0, < 7.0.14
Bitnami/dotnet-sdk>= 6.0.0, < 6.0.25, >= 7.0.0, < 7.0.14
NuGet/System.Net.Requests>= 8.0.0-rc.2.23480.2, < 8.0.0

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

參考連結(5)