ASP.NET Core Security Feature Bypass Vulnerability

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• osv-coords34 versions

  pkg:bitnami/aspnet-corepkg:bitnami/dotnetpkg:bitnami/dotnet-sdkpkg:nuget/microsoft.aspnetcore.componentspkg:rpm/almalinux/aspnetcore-runtime-6.0pkg:rpm/almalinux/aspnetcore-runtime-7.0pkg:rpm/almalinux/aspnetcore-runtime-8.0pkg:rpm/almalinux/aspnetcore-targeting-pack-6.0pkg:rpm/almalinux/aspnetcore-targeting-pack-7.0pkg:rpm/almalinux/aspnetcore-targeting-pack-8.0pkg:rpm/almalinux/dotnetpkg:rpm/almalinux/dotnet-apphost-pack-6.0pkg:rpm/almalinux/dotnet-apphost-pack-7.0pkg:rpm/almalinux/dotnet-apphost-pack-8.0pkg:rpm/almalinux/dotnet-hostpkg:rpm/almalinux/dotnet-hostfxr-6.0pkg:rpm/almalinux/dotnet-hostfxr-7.0pkg:rpm/almalinux/dotnet-hostfxr-8.0pkg:rpm/almalinux/dotnet-runtime-6.0pkg:rpm/almalinux/dotnet-runtime-7.0pkg:rpm/almalinux/dotnet-runtime-8.0pkg:rpm/almalinux/dotnet-sdk-6.0pkg:rpm/almalinux/dotnet-sdk-6.0-source-built-artifactspkg:rpm/almalinux/dotnet-sdk-7.0pkg:rpm/almalinux/dotnet-sdk-7.0-source-built-artifactspkg:rpm/almalinux/dotnet-sdk-8.0pkg:rpm/almalinux/dotnet-sdk-8.0-source-built-artifactspkg:rpm/almalinux/dotnet-targeting-pack-6.0pkg:rpm/almalinux/dotnet-targeting-pack-7.0pkg:rpm/almalinux/dotnet-targeting-pack-8.0pkg:rpm/almalinux/dotnet-templates-6.0pkg:rpm/almalinux/dotnet-templates-7.0pkg:rpm/almalinux/dotnet-templates-8.0pkg:rpm/almalinux/netstandard-targeting-pack-2.1

  >= 6.0.0, < 6.0.25+ 33 more

  • (no CPE)range: >= 6.0.0, < 6.0.25
  • (no CPE)range: >= 6.0.0, < 6.0.25
  • (no CPE)range: >= 6.0.0, < 6.0.25
  • (no CPE)range: >= 8.0.0-rc.2.23480.2, < 8.0.0
  • (no CPE)range: < 6.0.25-1.el9_3
  • (no CPE)range: < 7.0.14-1.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 6.0.25-1.el9_3
  • (no CPE)range: < 7.0.14-1.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 8.0.100-2.el8_9
  • (no CPE)range: < 6.0.25-1.el9_3
  • (no CPE)range: < 7.0.14-1.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 6.0.25-1.el9_3
  • (no CPE)range: < 7.0.14-1.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 6.0.25-1.el9_3
  • (no CPE)range: < 7.0.14-1.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 6.0.125-1.el9_3
  • (no CPE)range: < 6.0.125-1.el9_3
  • (no CPE)range: < 7.0.114-1.el9_3
  • (no CPE)range: < 7.0.114-1.el9_3
  • (no CPE)range: < 8.0.100-2.el9_3
  • (no CPE)range: < 8.0.100-2.el9_3
  • (no CPE)range: < 6.0.25-1.el9_3
  • (no CPE)range: < 7.0.14-1.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 6.0.125-1.el9_3
  • (no CPE)range: < 7.0.114-1.el9_3
  • (no CPE)range: < 8.0.100-2.el9_3
  • (no CPE)range: < 8.0.100-2.el9_3
• Microsoft/Aspnetcorecpe-rescue3 versions

  6.0+ 2 more

  • (no CPE)range: 6.0
  • (no CPE)range: 7.0.0
  • (no CPE)range: 8.0
• Microsoft/Microsoft Visual Studio 2022 version 17.2v5

  Range: 17.2.0
• Microsoft/Microsoft Visual Studio 2022 version 17.4v5

  Range: 17.4.0
• Microsoft/Microsoft Visual Studio 2022 version 17.6v5

  Range: 17.6.0
• Microsoft/Microsoft Visual Studio 2022 version 17.7v5

  Range: 17.7.0
• Microsoft/.NET 6.0v5

  Range: 6.0.0
• Microsoft/.NET 7.0v5

  Range: 7.0.0
• Microsoft/.NET 8.0v5

  Range: 8.0

• github.com/advisories/GHSA-3fx3-85r4-8j3wghsaADVISORY
• msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36558ghsavendor-advisoryWEB
• nvd.nist.gov/vuln/detail/CVE-2023-36558ghsaADVISORY
• github.com/dotnet/announcements/issues/288ghsaWEB
• github.com/dotnet/runtime/security/advisories/GHSA-3fx3-85r4-8j3wghsaWEB

No linked articles in our index yet.