CVE-2023-35391

MediumCVSS 6.2

Published: 08/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.94%

77th percentile - higher than 77% of all known CVEs

Summary

A vulnerability in ASP.NET Core SignalR and Visual Studio allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.

Risk Assessment

Information disclosure could lead to privacy violations for users and potential misuse of that data in attacks.

Recommendation

It is recommended to update to the latest version of ASP.NET Core SignalR and Visual Studio to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability