msrc_cve-2023-36560
Vulnerability from csaf_microsoft
Published
2023-11-14 08:00
Modified
2023-11-17 08:00
Summary
ASP.NET Security Feature Bypass Vulnerability

Notes

Additional Resources
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer
The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Customer Action
Required. The vulnerability documented by this CVE requires customer action to resolve.



{
   document: {
      acknowledgments: [
         {
            names: [
               "<a href=\"https://twitter.com/mwulftange\">Markus Wulftange</a> with <a href=\"https://code-white.com/\">CODE WHITE GmbH</a>",
            ],
         },
         {
            names: [
               "<a href=\"https://twitter.com/irsdl\">Soroush Dalili</a> with <a href=\"https://www.secproject.com/\">SecProject</a>",
            ],
         },
         {
            names: [
               "<a href=\"https://twitter.com/mwulftange\">Markus Wulftange</a> with <a href=\"https://code-white.com/\">CODE WHITE GmbH</a>",
            ],
         },
      ],
      aggregate_severity: {
         namespace: "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
         text: "Important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Public",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en-US",
      notes: [
         {
            category: "general",
            text: "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
            title: "Additional Resources",
         },
         {
            category: "legal_disclaimer",
            text: "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
            title: "Disclaimer",
         },
         {
            category: "general",
            text: "Required. The vulnerability documented by this CVE requires customer action to resolve.",
            title: "Customer Action",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "secure@microsoft.com",
         name: "Microsoft Security Response Center",
         namespace: "https://msrc.microsoft.com",
      },
      references: [
         {
            category: "self",
            summary: "CVE-2023-36560 ASP.NET Security Feature Bypass Vulnerability - HTML",
            url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36560",
         },
         {
            category: "self",
            summary: "CVE-2023-36560 ASP.NET Security Feature Bypass Vulnerability - CSAF",
            url: "https://msrc.microsoft.com/csaf/2023/msrc_cve-2023-36560.json",
         },
         {
            category: "external",
            summary: "Microsoft Exploitability Index",
            url: "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1",
         },
         {
            category: "external",
            summary: "Microsoft Support Lifecycle",
            url: "https://support.microsoft.com/lifecycle",
         },
         {
            category: "external",
            summary: "Common Vulnerability Scoring System",
            url: "https://www.first.org/cvss",
         },
      ],
      title: "ASP.NET Security Feature Bypass Vulnerability",
      tracking: {
         current_release_date: "2023-11-17T08:00:00.000Z",
         generator: {
            date: "2025-01-01T02:15:45.246Z",
            engine: {
               name: "MSRC Generator",
               version: "1.0",
            },
         },
         id: "msrc_CVE-2023-36560",
         initial_release_date: "2023-11-14T08:00:00.000Z",
         revision_history: [
            {
               date: "2023-11-14T08:00:00.000Z",
               legacy_version: "1",
               number: "1",
               summary: "Information published.",
            },
            {
               date: "2023-11-17T08:00:00.000Z",
               legacy_version: "1.1",
               number: "2",
               summary: "Updated the build numbers.  This is an informational update only.",
            },
         ],
         status: "final",
         version: "2",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "7",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-12244",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "8",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-12242",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "9",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-12243",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 <4.8.9206.0",
                     product_id: "51",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 4.8.9206.0",
                     product_id: "11650-10852",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 <4.8.9206.0",
                     product_id: "52",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 4.8.9206.0",
                     product_id: "11650-10853",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 <4.8.9206.0",
                     product_id: "53",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 4.8.9206.0",
                     product_id: "11650-10816",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 <4.8.9206.0",
                     product_id: "54",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 4.8.9206.0",
                     product_id: "11650-10855",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 <4.8.9206.0",
                     product_id: "55",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 4.8.9206.0",
                     product_id: "11650-10051",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 <4.8.9206.0",
                     product_id: "56",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 4.8.9206.0",
                     product_id: "11650-10049",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 <4.8.9206.0",
                     product_id: "57",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 4.8.9206.0",
                     product_id: "11650-10378",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 <4.8.9206.0",
                     product_id: "58",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 4.8.9206.0",
                     product_id: "11650-10379",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 <4.8.9206.0",
                     product_id: "59",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 4.8.9206.0",
                     product_id: "11650-10483",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "37",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-11568",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 <4.8.9206.0",
                     product_id: "60",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 4.8 4.8.9206.0",
                     product_id: "11650-10543",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "38",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-11569",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "39",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-11571",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "40",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-11923",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "41",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-11572",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "42",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-11924",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "43",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-11926",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "44",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-11927",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "45",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-11929",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "46",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-11930",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "47",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-12097",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "48",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-11931",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "49",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-12098",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 <4.8.4682.0",
                     product_id: "50",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.4682.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8 4.8.4682.0",
                     product_id: "11676-12099",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.4076.0",
                     product_id: "32",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.4076.0",
                     product_id: "11677-11568",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.4076.0",
                     product_id: "33",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.4076.0",
                     product_id: "11677-11572",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.4076.0",
                     product_id: "34",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.4076.0",
                     product_id: "11677-11569",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.4076.0",
                     product_id: "35",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.4076.0",
                     product_id: "11677-11570",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.4076.0",
                     product_id: "36",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.4076.0",
                     product_id: "11677-11571",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.14393.6452",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 <10.0.14393.6452",
                     product_id: "28",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.14393.6452",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 10.0.14393.6452",
                     product_id: "11723-10852",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.14393.6452",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 <10.0.14393.6452",
                     product_id: "29",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.14393.6452",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 10.0.14393.6452",
                     product_id: "11723-10853",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.14393.6452",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 <10.0.14393.6452",
                     product_id: "30",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.14393.6452",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 10.0.14393.6452",
                     product_id: "11723-10816",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.14393.6452",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 <10.0.14393.6452",
                     product_id: "31",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.14393.6452",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 10.0.14393.6452",
                     product_id: "11723-10855",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.4076.0",
                     product_id: "22",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4076.0",
                     product_id: "11863-10049",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.4076.0",
                     product_id: "23",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4076.0",
                     product_id: "11863-10051",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.4076.0",
                     product_id: "24",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4076.0",
                     product_id: "11863-10378",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.4076.0",
                     product_id: "25",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4076.0",
                     product_id: "11863-10483",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.4076.0",
                     product_id: "26",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4076.0",
                     product_id: "11863-10379",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.4076.0",
                     product_id: "27",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4076.0",
                     product_id: "11863-10543",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "10",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-11923",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "11",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-11924",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "12",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-11926",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "13",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-11927",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "14",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-11929",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "15",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-11931",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "16",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-11930",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "17",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-12085",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "18",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-12086",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "19",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-12098",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "20",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-12099",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.9206.0",
                     product_id: "21",
                  },
               },
               {
                  category: "product_version",
                  name: "4.8.9206.0",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.9206.0",
                     product_id: "12079-12097",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.8.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2 <4.7.4076.0",
                     product_id: "3",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2 4.7.4076.0",
                     product_id: "12115-10287",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.6.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2 <4.7.4076.0",
                     product_id: "4",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2 4.7.4076.0",
                     product_id: "12115-9312",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.6.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2 <4.7.4076.0",
                     product_id: "5",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2 4.7.4076.0",
                     product_id: "12115-9318",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.6.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2 <4.7.4076.0",
                     product_id: "6",
                  },
               },
               {
                  category: "product_version",
                  name: "4.7.4076.0",
                  product: {
                     name: "Microsoft .NET Framework 4.6.2 4.7.4076.0",
                     product_id: "12115-9344",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 4.6.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.10240.20308",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.6/4.6.2 <10.0.10240.20308",
                     product_id: "1",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.10240.20308",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.6/4.6.2 10.0.10240.20308",
                     product_id: "12135-10729",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.6/4.6.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.10240.20308",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.6/4.6.2 <10.0.10240.20308",
                     product_id: "2",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.10240.20308",
                  product: {
                     name: "Microsoft .NET Framework 3.5 AND 4.6/4.6.2 10.0.10240.20308",
                     product_id: "12135-10735",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5 AND 4.6/4.6.2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 2.0 Service Pack 2 <3.0.50727.8975",
                     product_id: "63",
                  },
               },
               {
                  category: "product_version",
                  name: "3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 2.0 Service Pack 2 3.0.50727.8975",
                     product_id: "9292-9312",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 2.0 Service Pack 2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 2.0 Service Pack 2 <3.0.50727.8975",
                     product_id: "64",
                  },
               },
               {
                  category: "product_version",
                  name: "3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 2.0 Service Pack 2 3.0.50727.8975",
                     product_id: "9292-9318",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 2.0 Service Pack 2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.0 Service Pack 2 <3.0.50727.8975",
                     product_id: "65",
                  },
               },
               {
                  category: "product_version",
                  name: "3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.0 Service Pack 2 3.0.50727.8975",
                     product_id: "9195-9312",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.0 Service Pack 2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.0 Service Pack 2 <3.0.50727.8975",
                     product_id: "66",
                  },
               },
               {
                  category: "product_version",
                  name: "3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.0 Service Pack 2 3.0.50727.8975",
                     product_id: "9195-9318",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.0 Service Pack 2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.5 <3.0.50727.8975",
                     product_id: "67",
                  },
               },
               {
                  category: "product_version",
                  name: "3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.5 3.0.50727.8975",
                     product_id: "2472-10378",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.5 <3.0.50727.8975",
                     product_id: "68",
                  },
               },
               {
                  category: "product_version",
                  name: "3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.5 3.0.50727.8975",
                     product_id: "2472-10379",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.5 <3.0.50727.8975",
                     product_id: "69",
                  },
               },
               {
                  category: "product_version",
                  name: "3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.5 3.0.50727.8975",
                     product_id: "2472-10543",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.5 <3.0.50727.8975",
                     product_id: "70",
                  },
               },
               {
                  category: "product_version",
                  name: "3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.5 3.0.50727.8975",
                     product_id: "2472-10483",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.5.1 <3.0.50727.8975",
                     product_id: "61",
                  },
               },
               {
                  category: "product_version",
                  name: "3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.5.1 3.0.50727.8975",
                     product_id: "9495-10049",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5.1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.5.1 <3.0.50727.8975",
                     product_id: "62",
                  },
               },
               {
                  category: "product_version",
                  name: "3.0.50727.8975",
                  product: {
                     name: "Microsoft .NET Framework 3.5.1 3.0.50727.8975",
                     product_id: "9495-10051",
                  },
               },
            ],
            category: "product_name",
            name: "Microsoft .NET Framework 3.5.1",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-36560",
         notes: [
            {
               category: "general",
               text: "Microsoft",
               title: "Assigning CNA",
            },
            {
               category: "faq",
               text: "The attacker would be able to bypass the security checks that prevents an attacker from accessing internal applications in a website.",
               title: "What kind of security feature could be bypassed by successfully exploiting this vulnerability?",
            },
            {
               category: "faq",
               text: "The attacker could send a specially crafted request that would enable them to access parts of a web application that they would not normally have access to.",
               title: "How could an attacker exploit this vulnerability?",
            },
         ],
         product_status: {
            fixed: [
               "11650-10049",
               "11650-10051",
               "11650-10378",
               "11650-10379",
               "11650-10483",
               "11650-10543",
               "11650-10816",
               "11650-10852",
               "11650-10853",
               "11650-10855",
               "11676-11568",
               "11676-11569",
               "11676-11571",
               "11676-11572",
               "11676-11923",
               "11676-11924",
               "11676-11926",
               "11676-11927",
               "11676-11929",
               "11676-11930",
               "11676-11931",
               "11676-12097",
               "11676-12098",
               "11676-12099",
               "11677-11568",
               "11677-11569",
               "11677-11570",
               "11677-11571",
               "11677-11572",
               "11723-10816",
               "11723-10852",
               "11723-10853",
               "11723-10855",
               "11863-10049",
               "11863-10051",
               "11863-10378",
               "11863-10379",
               "11863-10483",
               "11863-10543",
               "12079-11923",
               "12079-11924",
               "12079-11926",
               "12079-11927",
               "12079-11929",
               "12079-11930",
               "12079-11931",
               "12079-12085",
               "12079-12086",
               "12079-12097",
               "12079-12098",
               "12079-12099",
               "12079-12242",
               "12079-12243",
               "12079-12244",
               "12115-10287",
               "12115-9312",
               "12115-9318",
               "12115-9344",
               "12135-10729",
               "12135-10735",
               "2472-10378",
               "2472-10379",
               "2472-10483",
               "2472-10543",
               "9195-9312",
               "9195-9318",
               "9292-9312",
               "9292-9318",
               "9495-10049",
               "9495-10051",
            ],
            known_affected: [
               "1",
               "2",
               "3",
               "4",
               "5",
               "6",
               "7",
               "8",
               "9",
               "10",
               "11",
               "12",
               "13",
               "14",
               "15",
               "16",
               "17",
               "18",
               "19",
               "20",
               "21",
               "22",
               "23",
               "24",
               "25",
               "26",
               "27",
               "28",
               "29",
               "30",
               "31",
               "32",
               "33",
               "34",
               "35",
               "36",
               "37",
               "38",
               "39",
               "40",
               "41",
               "42",
               "43",
               "44",
               "45",
               "46",
               "47",
               "48",
               "49",
               "50",
               "51",
               "52",
               "53",
               "54",
               "55",
               "56",
               "57",
               "58",
               "59",
               "60",
               "61",
               "62",
               "63",
               "64",
               "65",
               "66",
               "67",
               "68",
               "69",
               "70",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2023-36560 ASP.NET Security Feature Bypass Vulnerability - HTML",
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36560",
            },
            {
               category: "self",
               summary: "CVE-2023-36560 ASP.NET Security Feature Bypass Vulnerability - CSAF",
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36560",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.9206.0:Security Update:https://support.microsoft.com/help/5032004",
               product_ids: [
                  "7",
               ],
               url: "https://support.microsoft.com/help/5032004",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.9206.0:Security Update:https://support.microsoft.com/help/5032007",
               product_ids: [
                  "8",
                  "9",
                  "17",
                  "18",
               ],
               url: "https://support.microsoft.com/help/5032007",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.4682.0:Security Update:https://support.microsoft.com/help/5031989",
               product_ids: [
                  "51",
                  "52",
                  "53",
                  "54",
               ],
               url: "https://support.microsoft.com/help/5031989",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.9206.0:Monthly Rollup:https://support.microsoft.com/help/5032341",
               product_ids: [
                  "55",
                  "56",
               ],
               url: "https://support.microsoft.com/help/5032341",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.9206.0:Security Only:https://support.microsoft.com/help/5032185",
               product_ids: [
                  "55",
                  "56",
               ],
               url: "https://support.microsoft.com/help/5032185",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.4682.0:Monthly Rollup:https://support.microsoft.com/help/5032342",
               product_ids: [
                  "57",
                  "58",
               ],
               url: "https://support.microsoft.com/help/5032342",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.4682.0:Monthly Rollup:https://support.microsoft.com/help/5032343",
               product_ids: [
                  "59",
                  "60",
               ],
               url: "https://support.microsoft.com/help/5032343",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.4682.0:Security Update:https://support.microsoft.com/help/5032337",
               product_ids: [
                  "37",
                  "38",
                  "39",
                  "41",
               ],
               url: "https://support.microsoft.com/help/5032337",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.4682.0:Security Update:https://support.microsoft.com/help/5032336",
               product_ids: [
                  "40",
                  "42",
               ],
               url: "https://support.microsoft.com/help/5032336",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.4682.0:Security Update:https://support.microsoft.com/help/5032340",
               product_ids: [
                  "43",
                  "44",
               ],
               url: "https://support.microsoft.com/help/5032340",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.4682.0:Security Update:https://support.microsoft.com/help/5032338",
               product_ids: [
                  "45",
                  "46",
                  "48",
               ],
               url: "https://support.microsoft.com/help/5032338",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.4682.0:Security Update:https://support.microsoft.com/help/5032339",
               product_ids: [
                  "47",
                  "49",
                  "50",
               ],
               url: "https://support.microsoft.com/help/5032339",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.7.4076.0:Security Update:https://support.microsoft.com/help/5032337",
               product_ids: [
                  "32",
                  "33",
                  "34",
                  "35",
                  "36",
               ],
               url: "https://support.microsoft.com/help/5032337",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "10.0.14393.6452:Security Update:https://support.microsoft.com/help/5032197",
               product_ids: [
                  "28",
                  "29",
                  "30",
                  "31",
               ],
               url: "https://support.microsoft.com/help/5032197",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.7.4076.0:Monthly Rollup:https://support.microsoft.com/help/5032341",
               product_ids: [
                  "22",
                  "23",
               ],
               url: "https://support.microsoft.com/help/5032341",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.7.4076.0:Security Only:https://support.microsoft.com/help/5032185",
               product_ids: [
                  "22",
                  "23",
               ],
               url: "https://support.microsoft.com/help/5032185",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.7.4076.0:Monthly Rollup:https://support.microsoft.com/help/5032342",
               product_ids: [
                  "24",
                  "26",
               ],
               url: "https://support.microsoft.com/help/5032342",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.7.4076.0:Monthly Rollup:https://support.microsoft.com/help/5032343",
               product_ids: [
                  "25",
                  "27",
               ],
               url: "https://support.microsoft.com/help/5032343",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.9206.0:Security Update:https://support.microsoft.com/help/5032336",
               product_ids: [
                  "10",
                  "11",
               ],
               url: "https://support.microsoft.com/help/5032336",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.9206.0:Security Update:https://support.microsoft.com/help/5032340",
               product_ids: [
                  "12",
                  "13",
               ],
               url: "https://support.microsoft.com/help/5032340",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.9206.0:Security Update:https://support.microsoft.com/help/5032338",
               product_ids: [
                  "14",
                  "15",
                  "16",
               ],
               url: "https://support.microsoft.com/help/5032338",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.8.9206.0:Security Update:https://support.microsoft.com/help/5032339",
               product_ids: [
                  "19",
                  "20",
                  "21",
               ],
               url: "https://support.microsoft.com/help/5032339",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.7.4076.0:Monthly Rollup:https://support.microsoft.com/help/5032344",
               product_ids: [
                  "3",
                  "4",
                  "5",
                  "6",
               ],
               url: "https://support.microsoft.com/help/5032344",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "4.7.4076.0:Security Only:https://support.microsoft.com/help/5032186",
               product_ids: [
                  "3",
                  "4",
                  "5",
                  "6",
               ],
               url: "https://support.microsoft.com/help/5032186",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "10.0.10240.20308:Security Update:https://support.microsoft.com/help/5032199",
               product_ids: [
                  "1",
                  "2",
               ],
               url: "https://support.microsoft.com/help/5032199",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "3.0.50727.8975:Monthly Rollup:https://support.microsoft.com/help/5032344",
               product_ids: [
                  "63",
                  "64",
                  "65",
                  "66",
               ],
               url: "https://support.microsoft.com/help/5032344",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "3.0.50727.8975:Security Only:https://support.microsoft.com/help/5032186",
               product_ids: [
                  "63",
                  "64",
                  "65",
                  "66",
               ],
               url: "https://support.microsoft.com/help/5032186",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "3.0.50727.8975:Monthly Rollup:https://support.microsoft.com/help/5032342",
               product_ids: [
                  "67",
                  "68",
               ],
               url: "https://support.microsoft.com/help/5032342",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "3.0.50727.8975:Monthly Rollup:https://support.microsoft.com/help/5032343",
               product_ids: [
                  "69",
                  "70",
               ],
               url: "https://support.microsoft.com/help/5032343",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "3.0.50727.8975:Monthly Rollup:https://support.microsoft.com/help/5032341",
               product_ids: [
                  "61",
                  "62",
               ],
               url: "https://support.microsoft.com/help/5032341",
            },
            {
               category: "vendor_fix",
               date: "2023-11-14T08:00:00.000Z",
               details: "3.0.50727.8975:Security Only:https://support.microsoft.com/help/5032185",
               product_ids: [
                  "61",
                  "62",
               ],
               url: "https://support.microsoft.com/help/5032185",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  environmentalsScore: 0,
                  exploitCodeMaturity: "UNPROVEN",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  remediationLevel: "OFFICIAL_FIX",
                  reportConfidence: "CONFIRMED",
                  scope: "UNCHANGED",
                  temporalScore: 7.7,
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
                  "2",
                  "3",
                  "4",
                  "5",
                  "6",
                  "7",
                  "8",
                  "9",
                  "10",
                  "11",
                  "12",
                  "13",
                  "14",
                  "15",
                  "16",
                  "17",
                  "18",
                  "19",
                  "20",
                  "21",
                  "22",
                  "23",
                  "24",
                  "25",
                  "26",
                  "27",
                  "28",
                  "29",
                  "30",
                  "31",
                  "32",
                  "33",
                  "34",
                  "35",
                  "36",
                  "37",
                  "38",
                  "39",
                  "40",
                  "41",
                  "42",
                  "43",
                  "44",
                  "45",
                  "46",
                  "47",
                  "48",
                  "49",
                  "50",
                  "51",
                  "52",
                  "53",
                  "54",
                  "55",
                  "56",
                  "57",
                  "58",
                  "59",
                  "60",
                  "61",
                  "62",
                  "63",
                  "64",
                  "65",
                  "66",
                  "67",
                  "68",
                  "69",
                  "70",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Security Feature Bypass",
            },
            {
               category: "exploit_status",
               details: "Exploited:No;Latest Software Release:Exploitation Less Likely",
            },
         ],
         title: "ASP.NET Security Feature Bypass Vulnerability",
      },
   ],
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.