PT-2022-7018
CVE-2022-34716
·
تاريخ النشر
2022-08-09
·
تاريخ التحديث
2026-10-01
الوصف من
CVSS 3.1
5.9
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
.NET Core 3.1 versions 3.1.0 through 3.1.27
.NET 6.0 versions 6.0.0 through 6.0.7
Description
An information disclosure issue exists due to incorrect restriction of XML external entity references, potentially allowing a remote attacker to access confidential information. This issue affects .NET Core 3.1 and .NET 6.0 applications.
Recommendations
For .NET Core 3.1 versions 3.1.0 through 3.1.27, update to Runtime 3.1.28.
For .NET 6.0 versions 6.0.0 through 6.0.7, update to Runtime 6.0.8 or SDK 6.0.108.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾