.NET 5.0 vulnerability

What happened

.NET Core and Visual Studio Information Disclosure Vulnerability

Affected versions

.NET 5.0: 5.0.0 through before 5.0.9 (custom); 2.1 through before 2.1.30 (custom); 3.1 through before 3.1.18 (custom); 15.9.0 through before 15.9.38 (custom); 16.10.0 through before 16.10.5 (custom); 16.0 through before 16.4.25 (custom); 16.0.0 through before 16.7.18 (custom); 15.0.0 through before 16.9.10 (custom); 7.0.0 through before 7.0.7 (custom); 7.1.0 through before 7.1.4 (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.