-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe commit diff shows the vulnerability was in AzureCloudStorageProvider.cs where ExpiresOn was set to AddHours(1) instead of AddMinutes(tokenDuration). This matches the advisory description about miscalculated token durations. The CreateSASUrl method is directly responsible for generating SAS URLs with user-specified durations, making it the clear vulnerable entry point.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ICG.AspNetCore.Utilities.CloudStorage | nuget | < 8.0.0 | 8.0.0 |