medium5.3
CVE-2024-50353
ICG.AspNetCore.Utilities.CloudStorage's Secure Token Durations Different Than Expected
Impact
### Impact Users of this library that set a duration for a SAS Uri with a value other than 1 hour may have generated a URL with a duration that is longer, or shorter than desired. Users not implemented SAS Uri's are unaffected. ### Patches This issue was resolved in version 8.0.0 of the library, all users should update to this version ASAP. ### Workarounds None
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | ICG.AspNetCore.Utilities.CloudStorage | < 8.0.0 | 8.0.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iowacomputergurus | Aspnetcore.Utilities.Cloudstorage | before 8.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/IowaComputerGurus/aspnetcore.utilities.cloudstorage/commit/8ea534481181a063175f457082662fdcad9a41ff
- https://github.com/IowaComputerGurus/aspnetcore.utilities.cloudstorage/security/advisories/GHSA-24mc-gc52-47jv
- https://github.com/advisories/GHSA-24mc-gc52-47jv
- https://nvd.nist.gov/vuln/detail/CVE-2024-50353