Identitymodel Extensions
1 CVEs
product
Monthly
IdentityModel Extensions for .NET provide assemblies for web developers that wish to use federated identity providers for establishing the caller's identity. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.
RCE
Microsoft
Code Injection
Identitymodel Extensions
NVD
GitHub
CVSS 3.1
7.1
EPSS
0.6%
CVE-2024-21643
NuGet
EPSS 1%
CVSS 7.1
HIGH
PATCH
This Month
IdentityModel Extensions for .NET provide assemblies for web developers that wish to use federated identity providers for establishing the caller's identity. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.
RCE
Microsoft
Code Injection
+1
NVD
GitHub