Most recent entries from all

bdu:2023-03236

certfr-2023-avi-0465 — De multiples vulnérabilités ont été corrigées dans les produits Microsoft. Elles permettent…

certfr-2023-avi-0465

EUVD-2026-208112

fkie_cve-2023-33141

Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability

GHSA-jrjw-qgr2-wfcg — YARP Denial of Service Vulnerability

Affected: NuGet: Yarp.ReverseProxy

### Impact A denial of service vulnerability exists in YARP.

### Patches If you're using YARP 1.x, you should update to NuGet package version [1.1.2](https://www.nuget.org/packages/Yarp.ReverseProxy/1.1.2). If you're using YARP 2.0.0, you should update to NuGet package version [2.0.1](https://www.nuget.org/packages/Yarp.ReverseProxy/2.0.1).

You can do so by updating the `PackageReference` in your `.csproj` file ```diff <ItemGroup> - <PackageReference Include="Yarp.ReverseProxy" Version="2.0.0" /> - <PackageReference Include="Yarp.Telemetry.Consumption" Version="2.0.0" /> + <PackageReference Include="Yarp.ReverseProxy" Version="2.0.1" /> + <PackageReference Include="Yarp.Telemetry.Consumption" Version="2.0.1" /> </ItemGroup> ``` or by selecting `2.0.1` in the NuGet UI inside Visual Studio (`Manage NuGet Packages` / `Updates`)

### References

[CVE-2023-33141](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33141)

gsd-2023-33141

msrc_CVE-2023-33141 — Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability

msrc_CVE-2023-33141

WID-SEC-W-2023-1446 — Microsoft Developer Tools: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft .NET Framework, Microsoft Azure DevOps Server, Microsoft NuGet, Microsoft Visual Studio und Microsoft Visual Studio Code ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Rechte zu erweitern und Daten zu manipulieren.