CVE-2024-50353 affects the ICG.AspNetCore.Utilities.CloudStorage library, where a misconfiguration in Shared Access Signature (SAS) URI generation could lead to unintended durations for cloud storage access. Specifically, if a duration other than one hour was set, the generated URI might have an incorrect expiration, either longer or shorter than intended. This vulnerability has a CVSS score of 5.3 (Medium), indicating a network-based attack with low complexity and a potential impact on data integrity (I:L), though confidentiality and availability are not affected. There is currently no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 8.0.0CPE matchmatch criteria | cpe:2.3:a:iowacomputergurus:aspnetcore.utilities.cloudstorage:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.