5.5
Medium
CVE-2021-34532 ASP.NET Core and Visual Studio Information Disclosure Vulnerability
Description
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ASP.NET Core 2.1 2.0 | 2.0 → < 2.1.29 | 2.1.29 |
| ASP.NET Core 3.1 3.0 | 3.0 → < 3.1.18 | 3.1.18 |
| ASP.NET Core 5.0 5.0 | 5.0 → < 5.0.9 | 5.0.9 |
| Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) 16.0 | 16.0 → < 16.4.25 | 16.4.25 |
| Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) 16.0 | 16.0.0 → < 16.7.18 | 16.7.18 |
| Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) 15.0 | 15.0.0 → < 16.9.10 | 16.9.10 |
| Microsoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9) 16.10 | 16.10.0 → < 16.10.5 | 16.10.5 |
| Visual Studio 2019 for Mac version 8.10 8.1 | 8.1.0 → < 8.10.7 | 8.10.7 |
References
- ASP.NET Core and Visual Studio Information Disclosure Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of ASP.NET Core 2.1
The 5 CVEs of ASP.NET Core 2.1 →
CVE-2023-38180
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
7.5
High
CVE-2023-35391
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
6.2
Medium
CVE-2020-1045
A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names. The…
7.5
High
CVE-2020-1597
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests
Not rated