CVE-2024-21386
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm
Identifiers
GHSA-g74q-5xw3-j7q9, CVE-2024-21386
Package Slug
nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm
Vulnerability
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Description
.NET Denial of Service Vulnerability
Affected Versions
All versions up to 6.0.26, all versions starting from 7.0.0 up to 7.0.15, all versions starting from 8.0.0 up to 8.0.1
Solution
Upgrade to versions 6.0.27, 7.0.16, 8.0.2 or above.
Last Modified
2024-02-14
| source |