CVE-2023-36558
published 2023-11-14CVE-2023-36558: ASP.NET Core Security Feature Bypass Vulnerability
PriorityP426medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
1.08%
61.5th percentile
ASP.NET Core Security Feature Bypass Vulnerability
Affected
30 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | asp.net_core | — | — |
| microsoft | asp.net_core | >= 6.0.0 < 6.0.25 | 6.0.25 |
| microsoft | asp.net_core | >= 7.0.0 < 7.0.14 | 7.0.14 |
| microsoft | asp.net_core_6.0 | >= 6.0 < 6.0.25 | 6.0.25 |
| microsoft | asp.net_core_7.0 | >= 7.0.0 < 7.0.14 | 7.0.14 |
| microsoft | asp.net_core_8.0 | >= 8.0 < 8.0.0 | 8.0.0 |
| microsoft | microsoft_visual_studio_2022_version_17.2 | >= 17.2.0 < 17.2.22 | 17.2.22 |
| microsoft | microsoft_visual_studio_2022_version_17.4 | >= 17.4.0 < 17.4.14 | 17.4.14 |
| microsoft | microsoft_visual_studio_2022_version_17.6 | >= 17.6.0 < 17.6.10 | 17.6.10 |
| microsoft | microsoft_visual_studio_2022_version_17.7 | >= 17.7.0 < 17.7.7 | 17.7.7 |
| microsoft | net | — | — |
| microsoft | net | >= 6.0.0 < 6.0.25 | 6.0.25 |
| microsoft | net | >= 7.0.0 < 7.0.14 | 7.0.14 |
| microsoft | net_6.0 | >= 6.0.0 < 6.0.25 | 6.0.25 |
| microsoft | net_7.0 | >= 7.0.0 < 7.0.14 | 7.0.14 |
| microsoft | net_8.0 | >= 8.0 < 8.0.0 | 8.0.0 |
| microsoft | visual_studio_2022 | >= 17.2 < 17.2.22 | 17.2.22 |
| microsoft | visual_studio_2022 | >= 17.4 < 17.4.14 | 17.4.14 |
| microsoft | visual_studio_2022 | >= 17.6 < 17.6.10 | 17.6.10 |
| microsoft | visual_studio_2022 | >= 17.7 < 17.7.7 | 17.7.7 |
| msrc | asp.net_core_6.0 | — | — |
| msrc | asp.net_core_7.0 | — | — |
| msrc | asp.net_core_8.0 | — | — |
| msrc | microsoft_visual_studio_2022_version_17.2 | — | — |
| msrc | microsoft_visual_studio_2022_version_17.4 | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
ghsa5.5MEDIUM
osv9.8CRITICAL
vendor_ubuntu7.6HIGH
vendor_msrc6.2MEDIUM
vendor_redhat6.2MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
dotnet6, dotnet7, dotnet8 vulnerabilities
osv·2023-11-15·CVSS 9.8
CVE-2023-36558 [CRITICAL] dotnet6, dotnet7, dotnet8 vulnerabilities
dotnet6, dotnet7, dotnet8 vulnerabilities
Barry Dorrans discovered that .NET did not properly implement certain
security features for Blazor server forms. An attacker could possibly
use this issue to bypass validation, which could trigger unintended
actions. (CVE-2023-36558)
Piotr Bazydlo discovered that .NET did not properly handle untrusted
URIs provided to System.Net.WebRequest.Create. An attacker could possibly
use this issue to inject arbitrary commands to backend FTP servers.
(CVE-2023-36049)
OSV
Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
osv·2023-11-14·CVSS 5.5
CVE-2023-36558 [MEDIUM] Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
# Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
## Executive summary
Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 6.0, ASP.NET Core 7.0 and, ASP.NET Core 8.0 RC2. This advisory also provides guidance on what developers can do to update their applications to address this vulnerability.
A security feature bypass vulnerability exists in ASP.NET where an unauthenticated user is able to bypass validation on Blazor server forms which could trigger unintended actions.
## Announcement
Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/288
### Mitigation factors
T
OSV
CVE-2023-36558: ASP
osv·2023-11-14·CVSS 5.5
CVE-2023-36558 [MEDIUM] CVE-2023-36558: ASP
ASP.NET Core Security Feature Bypass Vulnerability
GHSA
Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
ghsa·2023-11-14·CVSS 5.5
CVE-2023-36558 [MEDIUM] Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
# Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
## Executive summary
Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 6.0, ASP.NET Core 7.0 and, ASP.NET Core 8.0 RC2. This advisory also provides guidance on what developers can do to update their applications to address this vulnerability.
A security feature bypass vulnerability exists in ASP.NET where an unauthenticated user is able to bypass validation on Blazor server forms which could trigger unintended actions.
## Announcement
Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/288
### Mitigation factors
T
CISA ICS
Siemens ST7 ScadaConnect
cisa_ics·2024-06-13·CVSS 7.5
[HIGH] Siemens ST7 ScadaConnect
ICS Advisory
##
Siemens ST7 ScadaConnect
Release DateJune 13, 2024
Alert CodeICSA-24-165-04
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 8.2
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: ST7 ScadaConnect
- Vulnerabilities: Integer Overflow or Wraparound, Double Free, Improper Certificate Validation, Inefficient Regular Ex
Ubuntu
.NET vulnerabilities
vendor_ubuntu·2023-11-15·CVSS 7.6
CVE-2023-36049 [HIGH] .NET vulnerabilities
Title: .NET vulnerabilities
Summary: Several security issues were fixed in .NET.
Barry Dorrans discovered that .NET did not properly implement certain
security features for Blazor server forms. An attacker could possibly
use this issue to bypass validation, which could trigger unintended
actions. (CVE-2023-36558)
Piotr Bazydlo discovered that .NET did not properly handle untrusted
URIs provided to System.Net.WebRequest.Create. An attacker could possibly
use this issue to inject arbitrary commands to backend FTP servers.
(CVE-2023-36049)
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms
vendor_redhat·2023-11-14·CVSS 6.2
CVE-2023-36558 [MEDIUM] dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms
dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms
ASP.NET Core Security Feature Bypass Vulnerability
A security feature bypass vulnerability was found in Blazor forms in ASP.NET in the .NET package.
Mitigation: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Microsoft
ASP.NET Core Security Feature Bypass Vulnerability
vendor_msrc·2023-11-14·CVSS 6.2
CVE-2023-36558 [MEDIUM] ASP.NET Core Security Feature Bypass Vulnerability
ASP.NET Core Security Feature Bypass Vulnerability
FAQ: What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An unauthenticated attacker could bypass validations on Blazor Server forms.
FAQ: How could an attacker exploit this vulnerability?
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then trigger an event that could exploit the vulnerability to save an invalid state to a database or trigger other unintended actions, depending on what functionality the form provides.
ASP.NET Core: ASP.NET Core
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Security Feature Bypass
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely
Reference:
No detection rules found.
No public exploits indexed.
Trendmicro
The November 2023 Security Update Review
blogs_trendmicro·2023-11-14·CVSS 8.8
[HIGH] The November 2023 Security Update Review
## The November 2023 Security Update Review
Get the November 2023 security update and review.
By: Zero Day Initiative 2023/11/14 Read time: ( words)
Save to Folio
It’s the penultimate second Tuesday of 2023, and Microsoft and Adobe have released their latest security patches into the crisp, fall air. Take a break from your scheduled activities and join us as we review the details of their latest advisories. If you’d rather watch the video recap, you can check it out here:
C VE
Title
Severity
CVSS
Public
Exploited
Type
CVE-2023-36033
Windows DWM Core Library Elevation of Privilege Vulnerability
Important
7.8
Yes
Yes
EoP
CVE-2023-36036
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Important
7.8
No
Yes
EoP
CVE-2023-36025
Windows SmartSc
Bleepingcomputer
Microsoft November 2023 Patch Tuesday fixes 5 zero-days, 58 flaws
blogs_bleepingcomputer·2023-11-14·CVSS 7.8
[HIGH] Microsoft November 2023 Patch Tuesday fixes 5 zero-days, 58 flaws
## Microsoft November 2023 Patch Tuesday fixes 5 zero-days, 58 flaws
## Lawrence Abrams
16 Elevation of Privilege Vulnerabilities
6 Security Feature Bypass Vulnerabilities
15 Remote Code Execution Vulnerabilities
6 Information Disclosure Vulnerabilities
5 Denial of Service Vulnerabilities
11 Spoofing Vulnerabilities
The total count of 58 flaws does not include 5 Mariner security updates and 20 Microsoft Edge security updates released earlier this month.
To learn more about the non-security updates released today, you can review our dedicated articles on the new Windows 11 KB5032190 cumulative update and Windows 10 KB5032189 cumulative update .
## Five zero-days fixed
This month's Patch Tuesday fixes five zero-day vulnerabilities, with three exploited in attacks and three publicl
Trendmicro
The November 2023 Security Update Review
blogs_trendmicro·2023-11-14
The November 2023 Security Update Review
# The November 2023 Security Update Review
Get the November 2023 security update and review.
By: Zero Day Initiative
2023/11/14
Read time: ( words)
Save to Folio
It’s the penultimate second Tuesday of 2023, and Microsoft and Adobe have released their latest security patches into the crisp, fall air. Take a break from your scheduled activities and join us as we review the details of their latest advisories. If you’d rather watch the video recap, you can check it out here:
Adobe Patches for November 2023
For November, Adobe released 14 bulletins addressing 76 CVEs in Adobe Acrobat and Reader, ColdFusion, Audition, Premiere Pro, After Effects, Media Encoder, Dimension, Animate, InCopy, InDesign, RoboHelp, FrameMaker Publishing Server, Bridge, and Photoshop. A total of 54 of these bugs
Trendmicro
The November 2023 Security Update Review
blogs_trendmicro·2023-11-14·CVSS 8.8
[HIGH] The November 2023 Security Update Review
## The November 2023 Security Update Review
Get the November 2023 security update and review.
By: Zero Day Initiative Nov 14, 2023 Read time: ( words)
Save to Folio
It’s the penultimate second Tuesday of 2023, and Microsoft and Adobe have released their latest security patches into the crisp, fall air. Take a break from your scheduled activities and join us as we review the details of their latest advisories. If you’d rather watch the video recap, you can check it out here:
C VE
Title
Severity
CVSS
Public
Exploited
Type
CVE-2023-36033
Windows DWM Core Library Elevation of Privilege Vulnerability
Important
7.8
Yes
Yes
EoP
CVE-2023-36036
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Important
7.8
No
Yes
EoP
CVE-2023-36025
Windows Smart
2023-11-14
Published