CVE-2023-36558

MEDIUM6.2EPSS 0.39%

ASP.NET Core Security Feature Bypass Vulnerability

發布日:2023/11/14修改日:2025/5/20

也稱為:GHSA-3fx3-85r4-8j3wBIT-aspnet-core-2023-36558BIT-dotnet-2023-36558BIT-dotnet-sdk-2023-36558

描述

ASP.NET Core Security Feature Bypass Vulnerability

受影響套件(4)

Bitnami/aspnet-core>= 6.0.0, < 6.0.25, >= 7.0.0, < 7.0.14, >= 8.0.0, < 8.0.1
Bitnami/dotnet>= 6.0.0, < 6.0.25, >= 7.0.0, < 7.0.14
Bitnami/dotnet-sdk>= 6.0.0, < 6.0.25, >= 7.0.0, < 7.0.14
NuGet/Microsoft.AspNetCore.Components>= 8.0.0-rc.2.23480.2, < 8.0.0

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM6.2	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

參考連結(5)