CVE-2025-7326

EOL ASP.NET Core Elevation of Privilege Vulnerability

Summary

Original description

The description as published by the source.

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami aspnet-core

[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"7.0.18"}]}]

Bitnami dotnet

[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"8.0.1"}]}]

Bitnami dotnet-sdk

[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.0.418"}]}]

References

web msrc.microsoft.com
web nvd.nist.gov
web cve.org
web herodevs.com
web herodevs.com