p PatchFirst

CVE-2023-36558

CVE-2023-36558 · ASP.NET Core Security Feature Bypass Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

ASP.NET Core Security Feature Bypass Vulnerability

CVSS 6.2 · Medium · EPSS 1.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • .net 6.0

    Versions
    • ≥ 6.0.0, < 6.0.25: Affected (custom)

    Update to 6.0.25

  • asp.net core 6.0

    Versions
    • ≥ 6.0, < 6.0.25: Affected (custom)

    Update to 6.0.25

  • .net 7.0

    Versions
    • ≥ 7.0.0, < 7.0.14: Affected (custom)

    Update to 7.0.14

  • microsoft visual studio 2022 version 17.2

    Versions
    • ≥ 17.2.0, < 17.2.22: Affected (custom)

    Update to 17.2.22

  • .net 8.0

    Versions
    • ≥ 8.0, < 8.0.0: Affected (custom)

    No fix published

  • microsoft visual studio 2022 version 17.4

    Versions
    • ≥ 17.4.0, < 17.4.14: Affected (custom)

    Update to 17.4.14

  • microsoft visual studio 2022 version 17.6

    Versions
    • ≥ 17.6.0, < 17.6.10: Affected (custom)

    Update to 17.6.10

  • microsoft visual studio 2022 version 17.7

    Versions
    • ≥ 17.7.0, < 17.7.7: Affected (custom)

    Update to 17.7.7

  • asp.net core 7.0

    Versions
    • ≥ 7.0.0, < 7.0.14: Affected (custom)

    Update to 7.0.14

  • asp.net core 8.0

    Versions
    • ≥ 8.0, < 8.0.0: Affected (custom)

    No fix published

  • dotnet6 Ubuntu:22.04:LTS

    Versions
    • 6.0.108-0ubuntu1~22.04.1
    • 6.0.109-0ubuntu1~22.04.1
    • 6.0.110-0ubuntu1~22.04.1
    • 6.0.111-0ubuntu1~22.04.1
    • 6.0.113-0ubuntu1~22.04.1
    • 6.0.116-0ubuntu1~22.04.1
    • 6.0.118-0ubuntu1~22.04.1
    • 6.0.119-0ubuntu1~22.04.1
    • 6.0.120-0ubuntu1~22.04.1
    • 6.0.121-0ubuntu1~22.04.1
    • 6.0.122-0ubuntu1~22.04.1
    • 6.0.123-0ubuntu1~22.04.1
    • 6.0.124-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: < 6.0.125-0ubuntu1~22.04.1

    Update to 6.0.125-0ubuntu1~22.04.1

  • dotnet7 Ubuntu:22.04:LTS

    Versions
    • 7.0.105-0ubuntu1~22.04.1
    • 7.0.107-0ubuntu1~22.04.1
    • 7.0.108-0ubuntu1~22.04.1
    • 7.0.109-0ubuntu1~22.04.1
    • 7.0.110-0ubuntu1~22.04.1
    • 7.0.111-0ubuntu1~22.04.1
    • 7.0.112-0ubuntu1~22.04.1
    • 7.0.113-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: < 7.0.114-0ubuntu1~22.04.1

    Update to 7.0.114-0ubuntu1~22.04.1

Original sources

Check your server →