-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| System.Private.Uri | nuget | >= 4.3.0, < 4.3.2 | 4.3.2 |
C#C#Miggo AIRoot Cause AnalysisThe vulnerability exists in URI processing (CWE-19) within System.Private.Uri 4.3.0-4.3.1. Microsoft's advisory explicitly links improper web request handling to URI processing. While exact commit diffs are unavailable, the System.Uri class is central to request parsing in ASP.NET Core. The functions Parse and InitializeUri are core components of URI handling where inefficient processing of crafted inputs would directly enable DoS attacks. The high confidence comes from: 1) Package context (System.Private.Uri), 2) Vulnerability type matching URI processing flaws, and 3) Microsoft's description of request handling corrections.
Ongoing coverage of React2Shell