Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2023-33170

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

VectorNETWORK

PublishedJul 11, 2023, 18:15

Published Bysecure@microsoft.com

Base Score

8.1

Affected Versions

Package (Ecosystem)	Introduced	Fixed	Limit
Microsoft.AspNetCore.Identity(NuGet)	0	2.1.39	N/A
Microsoft.AspNet.Identity.Owin(NuGet)	0	2.2.4	N/A
Microsoft.AspNetCore.App.Runtime.linux-arm(NuGet)	0	6.0.20	N/A
Microsoft.AspNetCore.App.Runtime.linux-arm64(NuGet)	0	6.0.20	N/A
Microsoft.AspNetCore.App.Runtime.linux-musl-arm(NuGet)	0	6.0.20	N/A
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64(NuGet)	0	6.0.20	N/A
Microsoft.AspNetCore.App.Runtime.linux-x64(NuGet)	0	6.0.20	N/A
Microsoft.AspNetCore.App.Runtime.osx-x64(NuGet)	0	6.0.20	N/A
Microsoft.AspNetCore.App.Runtime.win-arm(NuGet)	0	6.0.20	N/A
Microsoft.AspNetCore.App.Runtime.win-arm64(NuGet)	0	6.0.20	N/A
Microsoft.AspNetCore.App.Runtime.win-x64(NuGet)	0	6.0.20	N/A
Microsoft.AspNetCore.App.Runtime.win-x86(NuGet)	0	6.0.20	N/A
Microsoft.AspNetCore.App.Runtime.win-x86(NuGet)	7.0.0	7.0.9	N/A
Microsoft.AspNetCore.App.Runtime.win-x64(NuGet)	7.0.0	7.0.9	N/A
Microsoft.AspNetCore.App.Runtime.win-arm64(NuGet)	7.0.0	7.0.9	N/A
Microsoft.AspNetCore.App.Runtime.win-arm(NuGet)	7.0.0	7.0.9	N/A
Microsoft.AspNetCore.App.Runtime.osx-x64(NuGet)	7.0.0	7.0.9	N/A
Microsoft.AspNetCore.App.Runtime.osx-arm64(NuGet)	7.0.0	7.0.9	N/A
Microsoft.AspNetCore.App.Runtime.linux-x64(NuGet)	7.0.0	7.0.9	N/A
Microsoft.AspNetCore.App.Runtime.linux-musl-x64(NuGet)	7.0.0	7.0.9	N/A
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64(NuGet)	7.0.0	7.0.9	N/A
Microsoft.AspNetCore.App.Runtime.linux-musl-arm(NuGet)	7.0.0	7.0.9	N/A
Microsoft.AspNetCore.App.Runtime.linux-arm(NuGet)	7.0.0	7.0.9	N/A
Microsoft.AspNetCore.App.Runtime.linux-arm64(NuGet)	7.0.0	7.0.9	N/A
Microsoft.AspNetCore.App.Runtime.linux-musl-x64(NuGet)	0	6.0.20	N/A
Microsoft.AspNetCore.App.Runtime.osx-arm64(NuGet)	0	6.0.20	N/A