CVE-2023-36558

CVE Database · CVE-2023-36558

· MEDIUMModified

CVSS v3.1

6.2

EPSS

1.08%

Published

Nov 14, 2023

Modified

Jan 1, 2025

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

ASP.NET Core Security Feature Bypass Vulnerability

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products (11)

microsoft · .net (up to 6.0.25)vulnerable

microsoft · .net (up to 7.0.14)vulnerable

microsoft · .netvulnerable

microsoft · asp.net_core (up to 6.0.25)vulnerable

microsoft · asp.net_core (up to 7.0.14)vulnerable

microsoft · asp.net_corevulnerable

microsoft · visual_studio_2022 (up to 17.2.22)vulnerable

microsoft · visual_studio_2022 (up to 17.4.14)

References (2)

PatchVendor Advisory

PatchVendor Advisory