Package · NuGet

Microsoft.AspNetCore.Identity

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

High 7.0

CVE-2025-24070

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Microsoft Microsoft Visual Studio 2022 version 17.8 Microsoft Visual Studio 2022 version 17.12 Microsoft Visual Studio 2022 version 17.10 Ubuntu Alpine NuGet

Mar 11, 2025
High 8.1

CVE-2023-33170

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.2 Ubuntu Alpine NuGet

Jul 11, 2023
High 7.5

CVE-2018-8171 EPSS 11%

Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MV…

Microsoft ASP.NET Core ASP.NET ASP.NET MVC 5.2 NuGet

Jul 11, 2018