p PatchFirst

CVE-2023-33170

CVE-2023-33170 · ASP.NET and Visual Studio Security Feature Bypass Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

CVSS 8.1 · High · EPSS 2.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • microsoft visual studio 2022 version 17.2

    Versions
    • ≥ 17.2.0, < 17.2.17: Affected (custom)

    Update to 17.2.17

  • microsoft visual studio 2022 version 17.0

    Versions
    • ≥ 17.0.0, < 17.0.23: Affected (custom)

    Update to 17.0.23

  • microsoft visual studio 2022 version 17.4

    Versions
    • ≥ 17.4.0, < 17.4.9: Affected (custom)

    Update to 17.4.9

  • microsoft visual studio 2022 version 17.6

    Versions
    • ≥ 17.6.0, < 17.6.5: Affected (custom)

    Update to 17.6.5

  • .net 6.0

    Versions
    • ≥ 6.0.0, < 6.0.20: Affected (custom)

    Update to 6.0.20

  • .net 7.0

    Versions
    • ≥ 7.0.0, < 7.0.9: Affected (custom)

    Update to 7.0.9

  • dotnet6 Ubuntu:22.04:LTS

    Versions
    • 6.0.108-0ubuntu1~22.04.1
    • 6.0.109-0ubuntu1~22.04.1
    • 6.0.110-0ubuntu1~22.04.1
    • 6.0.111-0ubuntu1~22.04.1
    • 6.0.113-0ubuntu1~22.04.1
    • 6.0.116-0ubuntu1~22.04.1
    • 6.0.118-0ubuntu1~22.04.1
    • 6.0.119-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: < 6.0.120-0ubuntu1~22.04.1

    Update to 6.0.120-0ubuntu1~22.04.1

  • dotnet7 Ubuntu:22.04:LTS

    Versions
    • 7.0.105-0ubuntu1~22.04.1
    • 7.0.107-0ubuntu1~22.04.1
    • 7.0.108-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: < 7.0.109-0ubuntu1~22.04.1

    Update to 7.0.109-0ubuntu1~22.04.1

Original sources

Check your server →