Tóm tắt nhanh
- CVE-2024-50353 là lỗ hổng mức TRUNG BÌNH (CVSS 5.3) ảnh hưởng ICG.AspNetCore.Utilities.CloudStorage, aspnetcore.utilities.cloudstorage (iowacomputergurus).
- Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.30%, cao hơn 22.6% các lỗ hổng khác.
- Cách xử lý: cập nhật lên 8.0.0 hoặc mới hơn.
Mô tả
Impact
Users of this library that set a duration for a SAS Uri with a value other than 1 hour may have generated a URL with a duration that is longer, or shorter than desired.
Users not implemented SAS Uri's are unaffected.
Patches
This issue was resolved in version 8.0.0 of the library, all users should update to this version ASAP.
Workarounds
None
Mô tả của NVD
ICG.AspNetCore.Utilities.CloudStorage is a collection of cloud storage utilities to assist with the management of files for cloud upload. Users of this library that set a duration for a SAS Uri with a value other than 1 hour may have generated a URL with a duration that is longer, or shorter than desired. Users not implemented SAS Uri's are unaffected. This issue was resolved in version 8.0.0 of the library.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí