What is CVE-2023-36566?

CVE-2023-36566 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Common Data Model SDK Denial of Service Vulnerability

Which CVE IDs does CVE-2023-36566 cover?

CVE-2023-36566 covers the following CVE IDs: CVE-2023-36566. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2023-36566?

CVE-2023-36566 has a CVSS v3 base score of 6.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2023-36566?

CVE-2023-36566 affects 4 products, including: Microsoft Common Data Model SDK for C#; Microsoft Common Data Model SDK for Java; Microsoft Common Data Model SDK for Python; Microsoft Common Data Model SDK for TypeScript.

CVE-2023-36566HighCVSS 6.5

Microsoft Common Data Model SDK Denial of Service Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

October 10, 2023

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2023-36566 →

📋 Description

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability? Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.

🎯 Affected products4

Microsoft Common Data Model SDK for C#
Microsoft Common Data Model SDK for Java
Microsoft Common Data Model SDK for Python
Microsoft Common Data Model SDK for TypeScript

✅ Remediation

KBRelease Notes (Security Update) — fixed build 1.7.4

🔗 References (6)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36566
patchhttps://central.sonatype.com/artifact/com.microsoft.commondatamodel/objectmodel?smo=true
referencehttps://github.com/microsoft/CDM
patchhttps://www.npmjs.com/package/cdm.objectmodel
patchhttps://pypi.org/project/commondatamodel-objectmodel/
patchhttps://www.nuget.org/profiles/CommonDataModel/