CVE-2024-50353

ICG.AspNetCore.Utilities.CloudStorage is a collection of cloud storage utilities to assist with the management of files for cloud upload. Users of this library that set a duration for a SAS Uri with a value other than 1 hour may have generated a URL with a duration that is longer, or shorter than desired. Users not implemented SAS Uri's are unaffected. This issue was resolved in version 8.0.0 of the library.

• CWE-284

• https://github.com/IowaComputerGurus/aspnetcore.utilities.cloudstorage/commit/8ea534481181a063175f457082662fdcad9a41ffPatch
• https://github.com/IowaComputerGurus/aspnetcore.utilities.cloudstorage/security/advisories/GHSA-24mc-gc52-47jvVendor Advisory

Published

Oct 30, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-50348InstantCMS is a free and open source content management syst…5.4
• CVE-2024-50349Git is a fast, scalable, distributed revision control system…4.7
• CVE-2024-5035The affected device expose a network service called "rftest"…8.8
• CVE-2024-50350LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…5.4
• CVE-2024-50351LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…5.4
• CVE-2024-50352LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…5.4
• CVE-2024-50354gnark is a fast zk-SNARK library that offers a high-level AP…5.5
• CVE-2024-50355LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…4.8
• CVE-2024-50356Press, a Frappe custom app that runs Frappe Cloud, manages i…0
• CVE-2024-50357FutureNet NXR series routers provided by Century Systems Co.…9.8
• CVE-2024-50358A CWE-15 "External Control of System or Configuration Settin…7.2
• CVE-2024-50359A CWE-78 "Improper Neutralization of Special Elements used i…7.2