CVE-2025-24070

Description

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Reserved 2025-01-16 | Published 2025-03-11 | Updated 2025-03-13 | Assigner microsoft

Problem types

CWE-1390: Weak Authentication

Product status

1.0.0 before 8.0.14
affected

1.0.0 before 9.0.3
affected

17.0 before 17.12.6
affected

17.10 before 17.13.3
affected

17.8.0 before 17.8.19
affected

17.10 before 17.10.12
affected

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24070 (ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability) vendor-advisory

cve.org (CVE-2025-24070)

nvd.nist.gov (CVE-2025-24070)

Download JSON