ASP.NET Coreにクロスサイトリクエストフォージェリの脆弱性、権限を昇格されるおそれ
Summary
ASP.NET Coreのクロスサイトリクエストフォージェリ（CSRF）の脆弱性により、認証のない攻撃者がネットワーク越しに権限を昇格させるおそれがあります。CVSSは7.5です。.NET 11.0のプレビュー版から11.0.0より前の版が影響を受け、Linux・Mac OS・Windows向けの.NET 11.0.0で修正されています。Visual Studio 2026は18.12.0より前の版が対象で、18.12.0で修正されています。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
ASP.NET Coreのクロスサイトリクエストフォージェリ（CSRF）の脆弱性により、認証のない攻撃者がネットワーク越しに権限を昇格させるおそれがあります。CVSSは7.5です。.NET 11.0のプレビュー版から11.0.0より前の版が影響を受け、Linux・Mac OS・Windows向けの.NET 11.0.0で修正されています。Visual Studio 2026は18.12.0より前の版が対象で、18.12.0で修正されています。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Microsoft.NET 11.0 installed on Linux |
≥ 11.0.0-preview.1, < 11.0.0→ 11.0.0 |
11.0.0 |
| Microsoft.NET 11.0 installed on Mac OS |
≥ 11.0.0-preview.1, < 11.0.0→ 11.0.0 |
11.0.0 |
| Microsoft.NET 11.0 installed on Windows |
≥ 11.0.0-preview.1, < 11.0.0→ 11.0.0 |
11.0.0 |
| MicrosoftMicrosoft Visual Studio 2026 version 18.12 |
< 18.12.0→ 18.12.0 |
18.12.0 |
| NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm |
≥ 11.0.0-preview.6.26359.118, < 11.0.0→ 11.0.0 |
11.0.0 |
| NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm64 |
≥ 11.0.0-preview.6.26359.118, < 11.0.0→ 11.0.0 |
11.0.0 |
| NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm |
≥ 11.0.0-preview.6.26359.118, < 11.0.0→ 11.0.0 |
11.0.0 |
| NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm64 |
≥ 11.0.0-preview.6.26359.118, < 11.0.0→ 11.0.0 |
11.0.0 |
| NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-x64 |
≥ 11.0.0-preview.6.26359.118, < 11.0.0→ 11.0.0 |
11.0.0 |
| NuGetMicrosoft.AspNetCore.App.Runtime.linux-x64 |
≥ 11.0.0-preview.6.26359.118, < 11.0.0→ 11.0.0 |
11.0.0 |
| NuGetMicrosoft.AspNetCore.App.Runtime.osx-arm64 |
≥ 11.0.0-preview.6.26359.118, < 11.0.0→ 11.0.0 |
11.0.0 |
| NuGetMicrosoft.AspNetCore.App.Runtime.osx-x64 |
≥ 11.0.0-preview.6.26359.118, < 11.0.0→ 11.0.0 |
11.0.0 |
| NuGetMicrosoft.AspNetCore.App.Runtime.win-arm64 |
≥ 11.0.0-preview.6.26359.118, < 11.0.0→ 11.0.0 |
11.0.0 |
| NuGetMicrosoft.AspNetCore.App.Runtime.win-x64 |
≥ 11.0.0-preview.6.26359.118, < 11.0.0→ 11.0.0 |
11.0.0 |
| NuGetMicrosoft.AspNetCore.App.Runtime.win-x86 |
≥ 11.0.0-preview.6.26359.118, < 11.0.0→ 11.0.0 |
11.0.0 |
Original description The description as published by the source.
Executive summary
Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core. This advisory provides guidance on updating affected applications and components.
The Blazor/SignalR /_blazor/refresh path can accept a cross-site request that binds a victim's authenticated principal to an attacker-owned circuit.
Announcement
Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/506
CVSS Details
- Version: 3.1
- Severity: High
- Score: 7.5 (base score)
- Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C - Weakness: CWE-352
Affected Platforms
- Platforms: Windows, Linux, macOS
- Architectures: All
Affected Packages
The tables list affected version ranges and fixed package versions. Runtime and standalone deliveries are listed separately.
.NET 11.0 - affected runtime packages
| Package | Affected version | Patched version |
|---|---|---|
| Microsoft.AspNetCore.App.Runtime.linux-arm | >= 11.0.0-preview.6.26359.118, <= 11.0.0-rc.3.26522.148 | 11.0.0 |
| Microsoft.AspNetCore.App.Runtime.linux-arm64 | >= 11.0.0-preview.6.26359.118, <= 11.0.0-rc.3.26522.148 | 11.0.0 |
| [Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.lin… |
Source: Microsoft Security Response Center Blog NVD GitHub Advisory
References
- advisory nvd.nist.gov
- package github.com
- REDHAT Red Hat
- web msrc.microsoft.com
- web github.com
- web github.com
- web github.com
- web github.com
- web github.com