MSRC-CVE-2023-36566 — Microsoft Common Data Model SDK Denial of Service Vulnerability

Summary

Impact: Denial of Service. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.

Security updates
1.7.4 — https://github.com/microsoft/CDM

Vulnerabilities 1

Medium 6.5

CVE-2023-36566

Microsoft Common Data Model SDK Denial of Service Vulnerability

Microsoft Common Data Model SDK Denial of Service Vulnerability

Microsoft Microsoft Common Data Model SDK for TypeScript Microsoft Common Data Model SDK for C# Microsoft Common Data Model SDK for Java Maven PyPI NuGet

Oct 10, 2023

Revision history

2023-10-10 #1
Information published.

References

CVE-2023-36566 Microsoft Common Data Model SDK Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36566
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss