CVE-2022-34716

Name of the Vulnerable Software and Affected Versions .NET Core 3.1 versions 3.1.0 through 3.1.27 .NET 6.0 versions 6.0.0 through 6.0.7

Description An information disclosure issue exists due to incorrect restriction of XML external entity references, potentially allowing a remote attacker to access confidential information. This issue affects .NET Core 3.1 and .NET 6.0 applications.

Recommendations For .NET Core 3.1 versions 3.1.0 through 3.1.27, update to Runtime 3.1.28. For .NET 6.0 versions 6.0.0 through 6.0.7, update to Runtime 6.0.8 or SDK 6.0.108.