CVE-2023-35391
MEDIUM.NET 6.0.0-6.0.20, ASP.NET Core 2.1-2.1.39, Visual Studio 2022 17.2.0-17.2.17 - Information Disclosure
Title source: llmDescription
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
References (1)
Core 1
Core References
Patch, Vendor Advisory vendor-advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35391
Scores
CVSS v3
6.2
EPSS
0.0243
EPSS Percentile
85.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (5)
microsoft/.net
6.0.0 - 6.0.21
microsoft/asp.net_core
2.1 - 2.1.40
microsoft/visual_studio_2022
17.2.0 - 17.2.18
nuget/Microsoft.AspNetCore.SignalR.Redis
0 - 1.0.40NuGet
nuget/Microsoft.AspNetCore.SignalR.StackExchangeRedis
7.0.0 - 7.0.10NuGet
Published
Aug 08, 2023
Tracked Since
Feb 18, 2026