CVE-2025-7326

EOL ASP.NET Core Elevation of Privilege Vulnerability

Résumé

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami aspnet-core

[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"7.0.18"}]}]

Bitnami dotnet

[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"8.0.1"}]}]

Bitnami dotnet-sdk

[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.0.418"}]}]

Références

web msrc.microsoft.com
web nvd.nist.gov
web cve.org
web herodevs.com
web herodevs.com