QID 92080

Microsoft has released November 2023 security updates for .NET Core and ASP.NET Core to fix multiple security vulnerabilities.

Affected versions:
ASP.NET Core and .NET Core 8.0 before version 8.0.0
ASP.NET Core and .NET Core 7.0 before version 7.0.14
ASP.NET Core and .NET Core 6.0 before version 6.0.25

QID Detection Logic: Authenticated
On Windows, this QID detects vulnerable versions of Microsoft .NET by checking the file version.
On Linux, this QID detects vulnerable versions of Microsoft .NET by checking the .NET version present in "/usr/share/dotnet/shared/Microsoft.NETCore.App/" and "/root/shared/Microsoft.NETCore.App" folders.
On Mac, this QID detects vulnerable versions of Microsoft .NET by checking the .NET version present in "/usr/share/dotnet/shared/Microsoft.NETCore.App/" folder.

Vulnerable versions of Microsoft ASP.NET Core and .NET Core are prone to Elevation of Privilege, Security Feature Bypass and Denial of Service vulnerability.