← All advisories

High severityNVD Advisory· Published Oct 10, 2023· Updated Apr 14, 2025

Azure Identity SDK Remote Code Execution Vulnerability

CVE-2023-36414

Description

Azure Identity SDK Remote Code Execution Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
Azure.IdentityNuGet	< 1.10.2	1.10.2

Affected products

2

ghsa-coords
pkg:nuget/azure.identity
Range: < 1.10.2
Microsoft/Azure Identity SDKcpe-rescue
Range: 1.0.0

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-5mfx-4wcx-rv27ghsaADVISORY
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36414ghsavendor-advisoryWEB
nvd.nist.gov/vuln/detail/CVE-2023-36414ghsaADVISORY
github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/CHANGELOG.mdghsaWEB

News mentions

0

No linked articles in our index yet.