Moderate severityNVD Advisory· Published Aug 12, 2021· Updated Aug 4, 2024
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
CVE-2021-34532
Description
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
Microsoft.AspNetCore.Authentication.JwtBearerNuGet | >= 2.1.0, < 2.1.29 | 2.1.29 |
Microsoft.AspNetCore.Authentication.JwtBearerNuGet | >= 3.0.0, < 3.1.18 | 3.1.18 |
Microsoft.AspNetCore.Authentication.JwtBearerNuGet | >= 5.0.0, < 5.0.9 | 5.0.9 |
Affected products
3cpe:2.3:a:microsoft:asp.net_core:2.1*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:asp.net_core:2.1*:*:*:*:*:*:*:*range: 2.0
- cpe:2.3:a:microsoft:asp.net_core:3.1:*:*:*:*:*:*:*range: 3.0
- cpe:2.3:a:microsoft:asp.net_core:5.0:*:*:*:*:*:*:*range: 5.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.