Vulnerability Database

296,733

Total vulnerabilities in the database

CVE-2023-36558

ASP.NET Core Security Feature Bypass Vulnerability

Published: Nov 14, 2023
Updated: May 4, 2025
CVE: CVE-2023-36558
GHSA: GHSA-3fx3-85r4-8j3w
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
Microsoft.AspNetCore.Components	8.0.0-rc.2.23480.2	8.0.0-rc.2.23480.2.x
Microsoft.AspNetCore.Components	8.0.0-rc.2.23480.2	8.0.0
Microsoft.AspNetCore.Components	7.0.0	7.0.14
Microsoft.AspNetCore.Components	6.0.0	6.0.25
microsoft / visual_studio_2022	17.7	17.7.7
microsoft / visual_studio_2022	17.6	17.6.10
microsoft / visual_studio_2022	17.4	17.4.14
microsoft / visual_studio_2022	17.2	17.2.22
microsoft / .net	8.0.0-rc1	8.0.0-rc1.x
microsoft / .net	8.0.0-rc2	8.0.0-rc2.x
microsoft / .net	7.0.0	7.0.14
microsoft / .net	6.0.0	6.0.25
microsoft / asp.net_core	8.0.0	8.0.0.x
microsoft / asp.net_core	7.0.0	7.0.14
microsoft / asp.net_core	6.0.0	6.0.25

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime