Azure / Azure/azure-functions-core-tools
High vulnerabilities in Azure Microsoft Defender for Cloud
- Dominant language
- C#
- Stars
- 1.5k
- Forks
- 498
- Avg merge
- 5d 4h
- Merged PRs (30d)
- 15
Description
Hello Azure team,
I have noticed some high vulnerabilities in Azure Microsoft Defender for Cloud, mainly related to Dotnet. Are there any plans to address these issues?
Release version: `4.0.5198`
The following CVEs have been identified:
- CVE-2023-36414
- CVE-2023-32731
- CVE-2023-1428
- [GHSA-m425-mq94-257g](https://github.com/advisories/GHSA-m425-mq94-257g)
Thank you for your attention to this matter.
Contributor guide
Research direction
No source files, tests, or entry points are named. Start by reviewing release 4.0.5198 and the four listed CVEs in the context of Azure Microsoft Defender for Cloud, then confirm with maintainers which vulnerability findings are in scope. Done would require an agreed remediation plan and verification that the reported high vulnerabilities are addressed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, csharp
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100