Cloud Storage Utilities May Generate incorrect URL Duration

CVE-2024-50353

5.3MEDIUM

Key Information

Vendor: Iowacomputergurus
Status: Aspnetcore.utilities.cloudstorage
Vendor: CVE Published:; 30 October 2024

Summary

ICG.AspNetCore.Utilities.CloudStorage is a collection of cloud storage utilities to assist with the management of files for cloud upload. Users of this library that set a duration for a SAS Uri with a value other than 1 hour may have generated a URL with a duration that is longer, or shorter than desired. Users not implemented SAS Uri's are unaffected. This issue was resolved in version 8.0.0 of the library.

Affected Version(s)

aspnetcore.utilities.cloudstorage = < 8.0.0

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Oct 30, 2024
Vulnerability Reserved.
Oct 22, 2024

Collectors

NVD DatabaseMitre Database