Kurz gesagt
- CVE-2024-50353 ist eine Schwachstelle (MITTEL (CVSS 5.3)) in ICG.AspNetCore.Utilities.CloudStorage, aspnetcore.utilities.cloudstorage (iowacomputergurus).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.30%, höher als bei 22.6% aller Schwachstellen.
- Abhilfe: auf 8.0.0 oder neuer aktualisieren.
Description
Impact
Users of this library that set a duration for a SAS Uri with a value other than 1 hour may have generated a URL with a duration that is longer, or shorter than desired.
Users not implemented SAS Uri's are unaffected.
Patches
This issue was resolved in version 8.0.0 of the library, all users should update to this version ASAP.
Workarounds
None
NVD description
ICG.AspNetCore.Utilities.CloudStorage is a collection of cloud storage utilities to assist with the management of files for cloud upload. Users of this library that set a duration for a SAS Uri with a value other than 1 hour may have generated a URL with a duration that is longer, or shorter than desired. Users not implemented SAS Uri's are unaffected. This issue was resolved in version 8.0.0 of the library.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free