MEDIUM 5.9 NuGet
Duplicate Advisory: .NET Information Disclosure Vulnerability
GHSA-2m65-m22p-9wjw
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-vh55-786g-wjwj. This link is maintained to preserve external references.
Original Description
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core 3.1 and .NET 6.0. An information disclosure vulnerability exists in .NET Core 3.1 and .NET 6.0 that could lead to unauthorized access of privileged information.
Affected software
- Any .NET 6.0 application running on .NET 6.0.7 or earlier.
- Any .NET Core 3.1 applicaiton running on .NET Core 3.1.27 or earlier.
Patches
- If you're using .NET 6.0, you should download and install Runtime 6.0.8 or SDK 6.0.108 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.
- If you're using .NET Core 3.1, you should download and install Runtime 3.1.28 (for Visual Studio 2019 v16.9) from https://dotnet.microsoft.com/download/dotnet-core/3.1.
References
- WEB https://github.com/dotnet/aspnetcore/security/advisories/GHSA-vh55-786g-wjwj
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-34716
- WEB https://github.com/dotnet/announcements/issues/232
- WEB https://github.com/dotnet/aspnetcore/issues/43166
- WEB https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716
- WEB https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-34716
Ready to move
Start Securing
Free, no credit card | First findings in minutes