CVE-2024-21404

CVE Database · CVE-2024-21404

· HIGHModified

CVSS v3.1

7.5

EPSS

2.71%

Published

Feb 13, 2024

Modified

Nov 21, 2024

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

.NET Denial of Service Vulnerability

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-476

Affected Products (6)

microsoft · asp.net_core (up to 6.0.27)vulnerable

microsoft · asp.net_core (up to 7.0.16)vulnerable

microsoft · asp.net_core (up to 8.0.2)vulnerable

microsoft · visual_studio_2022 (up to 17.4.16)vulnerable

microsoft · visual_studio_2022 (up to 17.6.12)vulnerable

microsoft · visual_studio_2022 (up to 17.8.7)vulnerable

References (2)

PatchVendor Advisory

PatchVendor Advisory