CVE-2023-35391

Published: Aug 8, 2023
Updated: May 9, 2024
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2023-35391" target="_blank" rel="noopener"> CVE-2023-35391
GHSA: <a href="https://github.com/advisories/GHSA-j8rm-cm55-qqj6" target="_blank" rel="noopener"> GHSA-j8rm-cm55-qqj6
Severity: High
Exploit:

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

CVSS v3:

CWEs:

Software	From	Fixed in
microsoft / visual_studio_2022	17.2.0	17.2.18
microsoft / visual_studio_2022	17.4.0	17.4.10
microsoft / visual_studio_2022	17.6.0	17.6.6
Microsoft.AspNetCore.SignalR.StackExchangeRedis	7.0.0	7.0.10
Microsoft.AspNetCore.SignalR.StackExchangeRedis	6.0.0	6.0.21
Microsoft.AspNetCore.SignalR.Redis	-	1.0.40
microsoft / .net	6.0.0	6.0.21
microsoft / .net	7.0.0	7.0.10
microsoft / asp.net_core	2.1	2.1.40