Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.7

Visual Studio and .NET Core Leaks Sensitive Project Information

CVE-2021-41355 · published 5 years ago
Summary

An issue in Visual Studio and .NET Core can reveal sensitive information about projects, such as source code and database credentials. This could compromise the security of your projects if an attacker gains access to this information. Update to the latest version of Visual Studio and .NET Core to fix this issue.

What to do
  • Update microsoft system.directoryservices.protocols to version 5.0.1.
  • Update microsoft powershell to version 7.1.5 or later.
Affected software
Ecosystem VendorProductAffected versions
nuget microsoft system.directoryservices.protocols < 5.0.1
Fix: upgrade to 5.0.1
– microsoft .net 5.0
cpe:2.3:a:microsoft:.net:5.0:*:*:*:*:*:*:*
– microsoft powershell >= 7.1, < 7.1.5
cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*
– microsoft visual_studio_2019 >= 16.0, <= 16.11
cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
Original advisory text
.NET Core and Visual Studio Information Disclosure Vulnerability
.NET Core and Visual Studio Information Disclosure Vulnerability
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.7 Medium
Exploitation
20% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published13 Oct 2021
Updated20 Oct 2026
First seen6 Mar 2026
Sources
GHSA-9cxh-gqpx-qc5m · GHSA
CVE-2021-41355 · NVD
Track software like this
Free during beta