ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
CVE-2023-35391

6.2MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft Visual Studio 2022 Version 17.2; Microsoft Visual Studio 2022 Version 17.4; Microsoft Visual Studio 2022 Version 17.6; Asp.net Core 2.1
Vendor: CVE Published:; 8 August 2023

What is CVE-2023-35391?

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

.NET 6.0 Unknown 6.0.0 < 6.0.21

.NET 7.0 Unknown 7.0.0 < 7.0.10

ASP.NET Core 2.1 Unknown 2.0 < 2.1.40

Score:

6.2

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet