High USN-7345-1 1 CVE

dotnet8, dotnet9 vulnerability

Published Mar 11, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Zahid TOKAT discovered that .NET suffered from a weak authentication
vulnerability. An attacker could possibly use this issue to elevate
privileges.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	dotnet8	8.0.114-8.0.14-0ubuntu1~22.04.1
Ubuntu · 24.04 LTS 24.04:LTS	dotnet8	8.0.114-8.0.14-0ubuntu1~24.04.1

Vulnerabilities 1

High 7.0

CVE-2025-24070

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Microsoft Microsoft Visual Studio 2022 version 17.8 Microsoft Visual Studio 2022 version 17.12 Microsoft Visual Studio 2022 version 17.10 Ubuntu Alpine NuGet

Mar 11, 2025

References

report
https://ubuntu.com/security/CVE-2025-24070