Vulnerability Database
Blog
FAQ
Docs
CVE-2023-35391
See a problem?
Please try reporting it
to the source
first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-35391
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-35391.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-35391
Aliases
BIT-aspnet-core-2023-35391
BIT-dotnet-2023-35391
BIT-dotnet-sdk-2023-35391
GHSA-j8rm-cm55-qqj6
Withdrawn
2024-05-15T05:32:12.168256Z
Published
2023-08-08T19:15:09Z
Modified
2023-12-06T01:03:04.629931Z
Severity
7.5 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Calculator
Summary
[none]
Details
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35391
Affected packages
Git
/
github.com/dotnet/aspnetcore
Affected ranges
Type
GIT
Repo
https://github.com/dotnet/aspnetcore
Events
Introduced
ae1a6cbe225b99c0bf38b7e31bf60cb653b73a52
Fixed
cec88a329584349fda070f4c7346b10538210ace
Introduced
bb01bbf4433e27289b99001b7de6a582879d1835
Introduced
ac66280fe9024bdd686354e342fcdfb3409597f7
Type
GIT
Repo
https://github.com/dotnet/core
Events
Introduced
ee849590a02cc5cd61eff18aa64bf985ec45124d
Fixed
28577332a7c3ed4134105a80b949da96dd4b9e1f
Introduced
63772e2191a750dd3cafa75914cacdb038c7520c
Introduced
e7dd0cd3ff917f087f7af2163006d7df6827438b
Affected versions
v3.*
v3.1.21
v3.1.22
v3.1.23
v3.1.24
v3.1.25
v3.1.26
v3.1.27
v3.1.28
v3.1.29
v3.1.30
v3.1.31
v3.1.32
v5.*
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.17
v6.*
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.14
v6.0.15
v6.0.16
v6.0.18
v6.0.19
v6.0.2
v6.0.20
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.8
v6.0.9
v7.*
v7.0.0
v7.0.0-preview.1
v7.0.0-preview.2
v7.0.0-preview.3
v7.0.0-preview.4
v7.0.0-preview.5
v7.0.0-preview.6
v7.0.0-preview.7
v7.0.0-rc.1
v7.0.0-rc.2
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.7
v7.0.8
v7.0.9
v8.*
v8.0.0-preview.1
v8.0.0-preview.2
v8.0.0-preview.3
v8.0.0-preview.4
v8.0.0-preview.5
v8.0.0-preview.6
CVE-2023-35391 - OSV