{"id":"CVE-2023-35391","aliases":["BIT-aspnet-core-2023-35391","BIT-dotnet-2023-35391","BIT-dotnet-sdk-2023-35391","GHSA-j8rm-cm55-qqj6"],"url":"https://o3.security/vulnerability/CVE-2023-35391","summary":".NET Information Disclosure Vulnerability","details":"ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability","published":"2023-08-08T19:15:09.940Z","modified":"2026-07-08T06:26:22.627158405Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"epss":{"score":0.01937,"percentile":0.78062,"asOf":"2026-07-31"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"NuGet","name":"Microsoft.AspNetCore.SignalR.StackExchangeRedis","fixedVersion":"7.0.10"},{"ecosystem":"NuGet","name":"Microsoft.AspNetCore.SignalR.StackExchangeRedis","fixedVersion":"6.0.21"},{"ecosystem":"NuGet","name":"Microsoft.AspNetCore.SignalR.Redis","fixedVersion":"1.0.40"}],"fix":null,"references":[{"type":"FIX","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35391"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T06:26:22.627158405Z"}}