~ / search / GHSA-24mc-gc52-47jv

GHSA-24mc-gc52-47jv

ICG.AspNetCore.Utilities.CloudStorage's Secure Token Durations Different Than Expected

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-50353

Packages

EcosystemPackageAffectedFixed in
NuGet ICG.AspNetCore.Utilities.CloudStorage < 8.0.0 8.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Users of this library that set a duration for a SAS Uri with a value other than 1 hour may have generated a URL with a duration that is longer, or shorter than desired. Users not implemented SAS Uri's are unaffected. ### Patches This issue was resolved in version 8.0.0 of the library, all users should update to this version ASAP. ### Workarounds None

References

External links from the advisory. They lead to third-party sites.