CVE-2023-36558

Published: Nov 14, 2023
Updated: May 4, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2023-36558" target="_blank" rel="noopener"> CVE-2023-36558
GHSA: <a href="https://github.com/advisories/GHSA-3fx3-85r4-8j3w" target="_blank" rel="noopener"> GHSA-3fx3-85r4-8j3w
Severity: Medium
Exploit:

ASP.NET Core Security Feature Bypass Vulnerability

CVSS v3:

No CWE or OWASP classifications available.

Software	From	Fixed in
Microsoft.AspNetCore.Components	8.0.0-rc.2.23480.2	8.0.0-rc.2.23480.2.x
Microsoft.AspNetCore.Components	8.0.0-rc.2.23480.2	8.0.0
Microsoft.AspNetCore.Components	7.0.0	7.0.14
Microsoft.AspNetCore.Components	6.0.0	6.0.25
microsoft / visual_studio_2022	17.7	17.7.7
microsoft / visual_studio_2022	17.6	17.6.10
microsoft / visual_studio_2022	17.4	17.4.14
microsoft / visual_studio_2022	17.2	17.2.22
microsoft / .net	8.0.0-rc1	8.0.0-rc1.x
microsoft / .net	8.0.0-rc2	8.0.0-rc2.x
microsoft / .net	7.0.0	7.0.14
microsoft / .net	6.0.0	6.0.25
microsoft / asp.net_core	8.0.0	8.0.0.x
microsoft / asp.net_core	7.0.0	7.0.14
microsoft / asp.net_core	6.0.0	6.0.25