Security
Headlines
HeadlinesLatestCVEs

Tag

#ASP.NET

CVE-2023-36038: ASP.NET Core Denial of Service Vulnerability

**How could an attacker exploit this vulnerability?** This vulnerability could be exploited if http requests to .NET 8 RC 1 running on IIS InProcess hosting model are cancelled. Threads counts would increase and an OutOfMemoryException is possible.

Microsoft Security Response Center
#vulnerability#dos#asp.net#ASP.NET#Security Vulnerability
CVE-2023-36558: ASP.NET Core - Security Feature Bypass Vulnerability

**What kind of security feature could be bypassed by successfully exploiting this vulnerability?** An unauthenticated attacker could bypass validations on Blazor Server forms.

CVE-2023-36560: ASP.NET Security Feature Bypass Vulnerability

**What kind of security feature could be bypassed by successfully exploiting this vulnerability?** The attacker would be able to bypass the security checks that prevents an attacker from accessing internal applications in a website.

CVE-2023-36899: ASP.NET Elevation of Privilege Vulnerability

**According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?** The target environment could be accidentally configured to allow the vulnerability.

CVE-2023-36899: ASP.NET Elevation of Privilege Vulnerability

**According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?** The target environment could be accidentally configured to allow the vulnerability.