Mar 2024: .NET Framework Information Disclosure Vulnerability
CVE-2024-29059 Published on March 23, 2024

.NET Framework Information Disclosure Vulnerability
.NET Framework Information Disclosure Vulnerability

Vendor Advisory NVD

Known Exploited Vulnerability

This Microsoft .NET Framework Information Disclosure Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.

The following remediation steps are recommended / required by February 25, 2025: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weakness Type

Generation of Error Message Containing Sensitive Information

The software generates an error message that includes sensitive information about its environment, users, or associated data.

Products Associated with CVE-2024-29059

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2024-29059 are published in Microsoft Net:

Microsoft Net

Affected Versions

Microsoft .NET Framework 4.8:

Version 4.8.0 and below 4.8.04690.02 is affected.

Microsoft .NET Framework 3.5 AND 4.8:

Version 4.8.0 and below 4.8.04690.02 is affected.

Microsoft .NET Framework 3.5 AND 4.7.2:

Version 4.7.0 and below 4.7.04081.03 is affected.

Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2:

Version 4.7.0 and below 4.7.04081.03 is affected.

Microsoft .NET Framework 3.5 AND 4.8.1:

Version 4.8.1 and below 4.8.09214.01 is affected.

Microsoft .NET Framework 4.6.2:

Version 4.7.0 and below 4.7.04081.03 is affected.

Microsoft .NET Framework 3.5 AND 4.6/4.6.2:

Version 10.0.0 and below 10.0.10240.20402 is affected.

Microsoft .NET Framework 2.0 Service Pack 2:

Version 2.0.0 and below 3.0.50727.8976 is affected.

Microsoft .NET Framework 3.0 Service Pack 2:

Version 3.0.0 and below 3.0.50727.8976 is affected.

Microsoft .NET Framework 3.5:

Version 3.5.0 and below 3.0.50727.8976 is affected.

Microsoft .NET Framework 3.5.1:

Version 3.5.0 and below 3.0.30729.8959 is affected.

Exploit Probability

EPSS

93.86%

Percentile

99.86%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.