Vulnerability Database
Blog
FAQ
Docs
BIT-dotnet-2023-36049
See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/dotnet/BIT-dotnet-2023-36049.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-dotnet-2023-36049
Aliases
BIT-dotnet-sdk-2023-36049
CVE-2023-36049
GHSA-c3hf-8vgx-72rh
Published
2024-03-06T10:54:10.094Z
Modified
2024-03-06T11:25:28.861Z
Summary
[none]
Details
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36049
Affected packages
Bitnami
/
dotnet
Package
Name
dotnet
Purl
pkg:bitnami/dotnet
Severity
9.8 (Critical)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Calculator
Affected ranges
Type
SEMVER
Events
Introduced
6.0.0
Fixed
6.0.25
Introduced
7.0.0
Fixed
7.0.14
Type
SEMVER
Events
Introduced
8.0.0-rc1
Last affected
8.0.0-rc1
Introduced
8.0.0-rc2
Last affected
8.0.0-rc2
BIT-dotnet-2023-36049 - OSV