← All advisories

High severityNVD Advisory· Published Aug 8, 2023· Updated Jan 1, 2025

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

CVE-2023-35391

Description

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
Microsoft.AspNetCore.SignalR.StackExchangeRedisNuGet	>= 7.0.0, < 7.0.10	7.0.10
Microsoft.AspNetCore.SignalR.StackExchangeRedisNuGet	>= 6.0.0, < 6.0.21	6.0.21
Microsoft.AspNetCore.SignalR.RedisNuGet	< 1.0.40	1.0.40

Affected products

11

osv-coords5 versions
pkg:bitnami/aspnet-core pkg:bitnami/dotnet pkg:bitnami/dotnet-sdk pkg:nuget/microsoft.aspnetcore.signalr.redis pkg:nuget/microsoft.aspnetcore.signalr.stackexchangeredis
>= 2.1.0, < 2.1.40+ 4 more
- (no CPE)range: >= 2.1.0, < 2.1.40
- (no CPE)range: >= 6.0.0, < 6.0.21
- (no CPE)range: >= 6.0.0, < 6.0.21
- (no CPE)range: < 1.0.40
- (no CPE)range: >= 7.0.0, < 7.0.10
Microsoft/Aspnetcorecpe-rescue
Range: 2.0
Microsoft/Microsoft Visual Studio 2022 version 17.2v5
Range: 17.2.0
Microsoft/Microsoft Visual Studio 2022 version 17.4v5
Range: 17.4.0
Microsoft/Microsoft Visual Studio 2022 version 17.6v5
Range: 17.6.0
Microsoft/.NET 6.0v5
Range: 6.0.0
Microsoft/.NET 7.0v5
Range: 7.0.0

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-j8rm-cm55-qqj6ghsaADVISORY
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35391ghsavendor-advisoryWEB
nvd.nist.gov/vuln/detail/CVE-2023-35391ghsaADVISORY
github.com/dotnet/announcements/issues/267ghsaWEB
github.com/dotnet/aspnetcore/security/advisories/GHSA-j8rm-cm55-qqj6ghsaWEB

News mentions

0

No linked articles in our index yet.