CVE-2023-33170

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

No affected versions have been published.

Timeline

Published
Jul 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-331716.1Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-331727.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-331737.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-331745.5Windows Cryptographic Information Disclosure VulnerabilityCVE-2023-331757.5ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to stCVE-2023-331766.5BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by aCVE-2023-331778.8Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can beCVE-2023-331786.5Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `/dataset/data/{id}` API route inside the CMCVE-2023-331796.5Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.CVE-2023-33185.4A vulnerability was found in SourceCodester Resort Management System 1.0. It has been declared as problematic. Affected by this vulnerabilitCVE-2023-331806.5Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.CVE-2023-331815.3Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will print a stack trace wh
CVE-2023-33170: High severity, CVSS 8.1 | Vulnix