Azure Identity SDK Remote Code Execution Vulnerability

GHSA-5mfx-4wcx-rv27 · CVE-2023-36414

Published Oct 10, 2023 · Modified Jun 3, 2024

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

Azure Identity SDK is vulnerable to remote code execution.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-36414
PACKAGE https://github.com/Azure/azure-sdk-for-net
WEB https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/CHANGELOG.md#1102-2023-10-10
WEB https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36414

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes

Azure Identity SDK Remote Code Execution Vulnerability

Description

References

More NuGet vulnerabilities

Start Securing