Lucene search

K
redhatRedHatRHSA-2023:7254
HistoryNov 15, 2023 - 5:21 p.m.

(RHSA-2023:7254) Moderate: dotnet8.0 security update

2023-11-1517:21:26
access.redhat.com
19
dotnet
security update
arbitrary file write
deletion vulnerability
asp.net
bypass vulnerability

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.1%

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Security Fix(es):

  • dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

  • dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.