6 reportsPriority Low
Microsoft security updates address multiple vulnerabilities in ASP.NET Core and .NET
First report Latest
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType VulnerabilityLead report
Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network
- Priority LowType Vulnerability
Insertion of sensitive information into log file in Aspire allows an authorized attacker to disclose information locally
- Priority LowType Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network
- Priority LowType Vulnerability
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network
- Priority LowType Vulnerability
Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally
- Priority LowType Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network