Weak Authentication Vulnerability in ASP.NET Core and Visual Studio
CVE-2025-24070
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 11 March 2025
What is CVE-2025-24070?
A security flaw in ASP.NET Core and Visual Studio can potentially allow unauthorized attackers to escalate their privileges over a network. This vulnerability arises from inadequate authentication mechanisms, which can be exploited by malicious entities to gain elevated access to sensitive functions and data within affected systems. It is crucial for users to apply security updates promptly to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
ASP.NET Core 8.0 Unknown 8.0 < 8.0.14
ASP.NET Core 9.0 Unknown 9.0 < 9.0.3
Microsoft Visual Studio 2022 version 17.10 Unknown 17.10.0 < 17.10.12
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved