-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| System.Security.Cryptography.Xml | nuget | < 4.7.1 | 4.7.1 |
| System.Security.Cryptography.Xml | nuget | >= 5.0.0, < 6.0.1 | 6.0.1 |
| Microsoft.AspNetCore.App.Runtime.win-x64 | nuget | >= 3.1.0, < 3.1.28 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.win-x64 | nuget | >= 6.0.0, < 6.0.8 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-x64 | nuget | >= 3.1.0, < 3.1.28 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.linux-x64 | nuget | >= 6.0.0, < 6.0.8 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.win-x86 | nuget | >= 3.1.0, < 3.1.28 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.win-x86 | nuget | >= 6.0.0, < 6.0.8 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.osx-x64 | nuget | >= 3.1.0, < 3.1.28 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.osx-x64 | nuget | >= 6.0.0, < 6.0.8 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | nuget | >= 3.1.0, < 3.1.28 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | nuget | >= 6.0.0, < 6.0.8 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-arm64 | nuget | >= 3.1.0, < 3.1.28 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.linux-arm64 | nuget | >= 6.0.0, < 6.0.8 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-arm | nuget | >= 3.1.0, < 3.1.28 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.linux-arm | nuget | >= 6.0.0, < 6.0.8 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.win-arm64 | nuget | >= 3.1.0, < 3.1.28 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.win-arm64 | nuget | >= 6.0.0, < 6.0.8 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.win-arm | nuget | >= 3.1.0, < 3.1.28 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.win-arm | nuget | >= 6.0.0, < 6.0.8 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | nuget | >= 3.1.0, < 3.1.28 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | nuget | >= 6.0.0, < 6.0.8 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-arm | nuget | >= 3.1.0, < 3.1.28 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-arm | nuget | >= 6.0.0, < 6.0.8 | 6.0.8 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from insecure XML parsing in signature verification (CVE-2022-34716). Both CheckSignature and LoadXml are core methods handling XML signature processing. Patches would focus on adding XmlResolver restrictions and DTD processing limitations in these methods. Runtime detection would show these cryptographic XML handling functions being called with malicious payloads during exploitation attempts.