CVE-2021-24112
Description
.NET Core Remote Code Execution Vulnerability
Risk Information
Base Score
8.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
1.107
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2021-1721,CVE-2021-24112,CVE-2021-26423,CVE-2021-26701,CVE-2021-34485 are fixed in Update for AspNet Core (x64) (2.1.30) | Windows |
| Vulnerabilities CVE-2021-1721,CVE-2021-24112,CVE-2021-26423,CVE-2021-26701,CVE-2021-34485 are fixed in Update for AspNet Core (x86) (2.1.30) | Windows |
| Vulnerabilities CVE-2021-24112 are fixed in Nuget - System.Drawing.Common 4.7.2 | Windows |
| Vulnerabilities CVE-2021-24112 are fixed in Nuget - System.Drawing.Common 5.0.3 | Windows |
| Vulnerabilities CVE-2021-24112 are affected in Oracle Hyperion Data Relationship Management 11.2.13.0.000 | Windows |
| Vulnerabilities CVE-2021-24112 are fixed in Nuget - System.Drawing.Common for Linux 4.7.2 | Linux |
| Vulnerabilities CVE-2021-24112 are fixed in Nuget - System.Drawing.Common for Linux 5.0.3 | Linux |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-108337 | Update for AspNet Core (x64) (2.1.30) |
| PATCH-108340 | Update for AspNet Core (x86) (2.1.30) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234