Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

 Sponsor

Project: Testing

Scan Information (show all):

Summary

Display: Showing Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
AWSSDK.CloudWatch.dllcpe:2.3:a:web_project:web:3.7.2.10:*:*:*:*:*:*:*pkg:generic/AWSSDK.CloudWatch@3.7.2.10 0Low13
AWSSDK.CloudWatchEvents.dllpkg:generic/AWSSDK.CloudWatchEvents@3.7.3.21 013
AWSSDK.CloudWatchLogs.dllcpe:2.3:a:web_project:web:3.7.1.29:*:*:*:*:*:*:*pkg:generic/AWSSDK.CloudWatchLogs@3.7.1.29 0Low13
AWSSDK.CognitoIdentity.dllcpe:2.3:a:web_project:web:3.7.0.2:*:*:*:*:*:*:*pkg:generic/AWSSDK.CognitoIdentity@3.7.0.2 0Low13
AWSSDK.CognitoIdentityProvider.dllcpe:2.3:a:web_project:web:3.7.1.26:*:*:*:*:*:*:*pkg:generic/AWSSDK.CognitoIdentityProvider@3.7.1.26 0Low13
AWSSDK.Core.dllcpe:2.3:a:web_project:web:3.7.102.0:*:*:*:*:*:*:*pkg:generic/AWSSDK.Core@3.7.102.0 0Low15
AWSSDK.DynamoDBv2.dllcpe:2.3:a:web_project:web:3.7.101.2:*:*:*:*:*:*:*pkg:generic/AWSSDK.DynamoDBv2@3.7.101.2 0Low21
AWSSDK.Extensions.NETCore.Setup.dllpkg:generic/AWSSDK.Extensions.NETCore.Setup@3.7.1 013
AWSSDK.Extensions.NETCore.Setup:3.7.2pkg:nuget/AWSSDK.Extensions.NETCore.Setup@3.7.2 08
AWSSDK.Kinesis.dllcpe:2.3:a:web_project:web:3.7.0.0:*:*:*:*:*:*:*pkg:generic/AWSSDK.Kinesis@3.7.0.0 0Low13
AWSSDK.Lambda.dllcpe:2.3:a:amazon:aws_lambda:3.7.3.3:*:*:*:*:*:*:*pkg:generic/AWSSDK.Lambda@3.7.3.3 0Low13
AWSSDK.S3.dllpkg:generic/AWSSDK.S3@3.7.1.26 015
AWSSDK.SQS.dllcpe:2.3:a:web_project:web:3.7.0.55:*:*:*:*:*:*:*pkg:generic/AWSSDK.SQS@3.7.0.55 0Low13
AWSSDK.SecurityToken.dllpkg:generic/AWSSDK.SecurityToken@3.7.0.2 013
AWSSDK.SimpleNotificationService.dllcpe:2.3:a:service_project:service:3.7.2.25:*:*:*:*:*:*:*pkg:generic/AWSSDK.SimpleNotificationService@3.7.2.25 0Low13
AWSSDK.SimpleSystemsManagement.dllpkg:generic/AWSSDK.SimpleSystemsManagement@3.7.20.6 013
Amazon.AspNetCore.DataProtection.SSM.dllcpe:2.3:a:asp-project:asp-project:2.1.0:*:*:*:*:*:*:*pkg:generic/Amazon.AspNetCore.DataProtection.SSM@2.1.0 0Low16
Amazon.Lambda.APIGatewayEvents.dllcpe:2.3:a:web_project:web:1.2.0.0:*:*:*:*:*:*:*pkg:generic/Amazon.Lambda.APIGatewayEvents@1.2.0.0 0Low15
Amazon.Lambda.APIGatewayEvents:2.5.0pkg:nuget/Amazon.Lambda.APIGatewayEvents@2.5.0 08
Amazon.Lambda.CloudWatchEvents.dllpkg:generic/Amazon.Lambda.CloudWatchEvents@0.0.0.0 09
Amazon.Lambda.Core.dllcpe:2.3:a:web_project:web:1.0.0.0:*:*:*:*:*:*:*pkg:generic/Amazon.Lambda.Core@1.0.0.0 0Low15
Amazon.Lambda.Core:2.1.0pkg:nuget/Amazon.Lambda.Core@2.1.0 08
Amazon.Lambda.KinesisAnalyticsEvents.dllpkg:generic/Amazon.Lambda.KinesisAnalyticsEvents@0.0.0.0 09
Amazon.Lambda.KinesisFirehoseEvents.dllpkg:generic/Amazon.Lambda.KinesisFirehoseEvents@0.0.0.0 09
Amazon.Lambda.LexEvents.dllpkg:generic/Amazon.Lambda.LexEvents@0.0.0.0 09
Amazon.Lambda.S3Events.dllpkg:generic/Amazon.Lambda.S3Events@1.0.0.0 015
Amazon.Lambda.Serialization.SystemTextJson.dllpkg:generic/Amazon.Lambda.Serialization.SystemTextJson@0.0.0.0 09
Amazon.Lambda.Serialization.SystemTextJson:2.3.0pkg:nuget/Amazon.Lambda.Serialization.SystemTextJson@2.3.0 08
Amazon.Lambda.TestUtilities.dllpkg:generic/Amazon.Lambda.TestUtilities@1.0.0.0 013
Amazon.Lambda.TestUtilities:2.0.0pkg:nuget/Amazon.Lambda.TestUtilities@2.0.0 08
Authorizer.Tests.csproj 02
Authorizer.Tests.dllpkg:generic/Authorizer.Tests@1.0.0 016
Authorizer.csproj 02
Authorizer.dllpkg:generic/Authorizer@1.0.0 016
AwsParameterStore.Microsoft.Extensions.Configuration.dllpkg:generic/AwsParameterStore.Microsoft.Extensions.Configuration@0.7.0 026
Hashids.net.dllpkg:generic/Hashids.net@1.6.1 020
Lumigo.DotNET.Instrumentation.dllpkg:generic/Lumigo.DotNET.Instrumentation@1.0.0 016
Lumigo.DotNET.Parser.dllpkg:generic/Lumigo.DotNET.Parser@1.0.0 016
Lumigo.DotNET.Utilities.dllpkg:generic/Lumigo.DotNET.Utilities@1.0.0 016
Lumigo.DotNET.dllpkg:generic/Lumigo.DotNET@1.0.51 022
Microsoft.AspNetCore.Authentication.JwtBearer.dllcpe:2.3:a:asp-project:asp-project:6.0.11:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_core:6.0.11:*:*:*:*:*:*:*		pkg:generic/Microsoft.AspNetCore.Authentication.JwtBearer@6.0.11 0Low23
Microsoft.DotNet.PlatformAbstractions.dllpkg:generic/Microsoft.DotNet.PlatformAbstractions@1.0.1 09
Microsoft.Extensions.Configuration.Abstractions.dllpkg:generic/Microsoft.Extensions.Configuration.Abstractions@7.0.22.51805 015
Microsoft.Extensions.Configuration.EnvironmentVariables.dllpkg:generic/Microsoft.Extensions.Configuration.EnvironmentVariables@7.0.22.51805 017
Microsoft.Extensions.Configuration.EnvironmentVariables:7.0.0pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@7.0.0 08
Microsoft.Extensions.Configuration.FileExtensions.dllpkg:generic/Microsoft.Extensions.Configuration.FileExtensions@7.0.22.51805 015
Microsoft.Extensions.Configuration.Json.dllpkg:generic/Microsoft.Extensions.Configuration.Json@7.0.22.51805 017
Microsoft.Extensions.Configuration.Json:7.0.0pkg:nuget/Microsoft.Extensions.Configuration.Json@7.0.0 08
Microsoft.Extensions.Configuration.dllpkg:generic/Microsoft.Extensions.Configuration@7.0.22.51805 015
Microsoft.Extensions.DependencyInjection.Abstractions.dllpkg:generic/Microsoft.Extensions.DependencyInjection.Abstractions@7.0.22.51805 015
Microsoft.Extensions.DependencyInjection.dllpkg:generic/Microsoft.Extensions.DependencyInjection@7.0.22.51805 015
Microsoft.Extensions.DependencyInjection:7.0.0pkg:nuget/Microsoft.Extensions.DependencyInjection@7.0.0 08
Microsoft.Extensions.DependencyModel.dllpkg:generic/Microsoft.Extensions.DependencyModel@1.0.1 09
Microsoft.Extensions.FileProviders.Abstractions.dllpkg:generic/Microsoft.Extensions.FileProviders.Abstractions@7.0.22.51805 015
Microsoft.Extensions.FileProviders.Physical.dllpkg:generic/Microsoft.Extensions.FileProviders.Physical@7.0.22.51805 017
Microsoft.Extensions.FileSystemGlobbing.dllpkg:generic/Microsoft.Extensions.FileSystemGlobbing@7.0.22.51805 015
Microsoft.Extensions.Primitives.dllpkg:generic/Microsoft.Extensions.Primitives@7.0.22.51805 015
Microsoft.IdentityModel.JsonWebTokens.dllcpe:2.3:a:identitymodel_project:identitymodel:6.10.0:20330:*:*:*:*:*:*
cpe:2.3:a:json_web_token_project:json_web_token:6.10.0:20330:*:*:*:*:*:*
cpe:2.3:a:microsoft:identity_model:6.10.0:20330:*:*:*:*:*:*
cpe:2.3:a:microsoft:identitymodel:6.10.0:20330:*:*:*:*:*:*		pkg:generic/Microsoft.IdentityModel.JsonWebTokens@6.10.0.20330MEDIUM1Low16
Microsoft.IdentityModel.Protocols.OpenIdConnect.dllcpe:2.3:a:identitymodel_project:identitymodel:6.10.0:20330:*:*:*:*:*:*
cpe:2.3:a:microsoft:identity_model:6.10.0:20330:*:*:*:*:*:*		pkg:generic/Microsoft.IdentityModel.Protocols.OpenIdConnect@6.10.0.20330MEDIUM1Low16
Microsoft.IdentityModel.Tokens.dllcpe:2.3:a:identitymodel_project:identitymodel:6.10.0:20330:*:*:*:*:*:*
cpe:2.3:a:microsoft:identity_model:6.10.0:20330:*:*:*:*:*:*
cpe:2.3:a:microsoft:identitymodel:6.10.0:20330:*:*:*:*:*:*		pkg:generic/Microsoft.IdentityModel.Tokens@6.10.0.20330MEDIUM1Low16
Microsoft.NET.Test.Sdk:15.5.0pkg:nuget/Microsoft.NET.Test.Sdk@15.5.0 08
Microsoft.TestPlatform.CrossPlatEngine.dllcpe:2.3:a:testplatform_project:testplatform:15.0.0:*:*:*:*:*:*:*pkg:generic/Microsoft.TestPlatform.CrossPlatEngine@15.0.0 0Low12
Microsoft.TestPlatform.CrossPlatEngine.resources.dllcpe:2.3:a:testplatform_project:testplatform:15.0.0:*:*:*:*:*:*:*pkg:generic/Microsoft.TestPlatform.CrossPlatEngine.resources@15.0.0 0Low11
Microsoft.VisualStudio.CodeCoverage.Shim.dllpkg:generic/Microsoft.VisualStudio.CodeCoverage.Shim@15.0.26228.0 017
Newtonsoft.Json.dllcpe:2.3:a:newtonsoft:json.net:13.0.3:*:*:*:*:*:*:*pkg:generic/Newtonsoft.Json@13.0.3 0Low15
Newtonsoft.Json.dllcpe:2.3:a:newtonsoft:json.net:13.0.2:*:*:*:*:*:*:*pkg:generic/Newtonsoft.Json@13.0.2 0Low22
SonarScanner.MSBuild.Common.dllpkg:generic/SonarScanner.MSBuild.Common@6.1.0.83647 017
SonarScanner.MSBuild.Tasks.dllcpe:2.3:a:tasks:tasks:6.1.0.83647:*:*:*:*:*:*:*pkg:generic/SonarScanner.MSBuild.Tasks@6.1.0.83647MEDIUM2Low15
System.IdentityModel.Tokens.Jwt.dllcpe:2.3:a:identitymodel_project:identitymodel:6.10.0:20330:*:*:*:*:*:*
cpe:2.3:a:microsoft:identity_model:6.10.0:20330:*:*:*:*:*:*
cpe:2.3:a:microsoft:identitymodel:6.10.0:20330:*:*:*:*:*:*		pkg:generic/System.IdentityModel.Tokens.Jwt@6.10.0.20330MEDIUM1Low16
System.Text.Encodings.Web.dllcpe:2.3:a:microsoft:system.text.encodings.web:7.0.22.51805:*:*:*:*:*:*:*pkg:generic/System.Text.Encodings.Web@7.0.22.51805 0Low19
System.Text.Json.dllpkg:generic/System.Text.Json@7.0.22.51805 017
System.Xml.XPath.XmlDocument.dllpkg:generic/System.Xml.XPath.XmlDocument@1.0.24212.01 020
testhost.dllpkg:generic/testhost@15.0.0 011
xunit.abstractions.dllpkg:generic/xunit.abstractions@2.0.0.0 017
xunit.assert.dllpkg:generic/xunit.assert@2.4.2 016
xunit.core.dllpkg:generic/xunit.core@2.4.2 016
xunit.execution.dotnet.dllpkg:generic/xunit.execution.dotnet@2.4.2 016
xunit.runner.reporters.netcoreapp10.dllpkg:generic/xunit.runner.reporters.netcoreapp10@2.4.2 018
xunit.runner.utility.netcoreapp10.dllpkg:generic/xunit.runner.utility.netcoreapp10@2.4.2 016
xunit.runner.visualstudio.dotnetcore.testadapter.dllpkg:generic/xunit.runner.visualstudio.dotnetcore.testadapter@2.4.5 017
xunit.runner.visualstudio:2.4.5pkg:nuget/xunit.runner.visualstudio@2.4.5 08
xunit:2.4.2pkg:nuget/xunit@2.4.2 04

Dependencies (vulnerable)

AWSSDK.CloudWatch.dll

Description:

AWSSDK.CloudWatch

The Amazon Web Services SDK for .NET (.NET Core 3.1) - Amazon CloudWatch. Amazon CloudWatch is a monitoring service for AWS cloud resources and the applications you run on AWS. You can use Amazon CloudWatch to collect and track metrics, collect and monitor log files, and set alarms.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.CloudWatch.dll
MD5: 9d23346785b3396e8b59177713590423
SHA1: e84faaba12a5b79db1ab580fe8ea6c6b93d1fe03
SHA256:6486f279a31e811c144890f932cb7044f286bc803c5f8a988b62adb1c25ebc24

Identifiers

AWSSDK.CloudWatchEvents.dll

Description:

AWSSDK.CloudWatchEvents

The Amazon Web Services SDK for .NET (.NET Core 3.1) - Amazon CloudWatch Events. Amazon CloudWatch Events helps you to respond to state changes in your AWS resources. When your resources change state they automatically send events into an event stream. You can create rules that match selected events in the stream and route them to targets to take action. You can also use rules to take action on a pre-determined schedule.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.CloudWatchEvents.dll
MD5: 6b1541f7461a9a513a718285e86d42ac
SHA1: 92cf5b4de876b4ba45d86aa0dc2e58659a4d57db
SHA256:331bbc34798197ca2ca68d0aa081227f4f030c610a5ff84227462021bf852f7b

Identifiers

AWSSDK.CloudWatchLogs.dll

Description:

AWSSDK.CloudWatchLogs

The Amazon Web Services SDK for .NET (.NET Core 3.1) - Amazon CloudWatch Logs. Amazon CloudWatch is a monitoring service for AWS cloud resources and the applications you run on AWS. You can use Amazon CloudWatch to collect and track metrics, collect and monitor log files, and set alarms.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.CloudWatchLogs.dll
MD5: c2d546dcd8bb37c54e2bfe6362bc2ac9
SHA1: a7387ef1a89f6cedd3e195c5d328520049ada04f
SHA256:b7232938714e18b2f44e14db68d4528a6e346db67a71067159bedfb87ea9af24

Identifiers

AWSSDK.CognitoIdentity.dll

Description:

AWSSDK.CognitoIdentity

The Amazon Web Services SDK for .NET (.NET Core 3.1) - Amazon Cognito Identity. Amazon Cognito is a service that makes it easy to save user data, such as app preferences or game state, in the AWS Cloud without writing any backend code or managing any infrastructure. With Amazon Cognito, you can focus on creating great app experiences instead of having to worry about building and managing a backend solution to handle identity management, network state, storage, and sync.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.CognitoIdentity.dll
MD5: 077d87642ad4a529f29c588103e1e9e9
SHA1: 5f457ed88006ef6cd8754e8009ec90ee88ec4222
SHA256:245c739a5dfc5d54bfe748463cad69c62672376e5223d320fd5ea06e23e5ef26

Identifiers

AWSSDK.CognitoIdentityProvider.dll

Description:

AWSSDK.CognitoIdentityProvider

The Amazon Web Services SDK for .NET (.NET Core 3.1) - Amazon Cognito Identity Provider. You can create a user pool in Amazon Cognito Identity to manage directories and users. You can authenticate a user to obtain tokens related to user identity and access policies. This API reference provides information about user pools in Amazon Cognito Identity, which is a new capability that is available as a beta.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.CognitoIdentityProvider.dll
MD5: e6a430a806b6c5c99263721a969311bb
SHA1: 0b91d48fdefd6bff4ba75f8c6192f1313d55e04c
SHA256:97c75eccc1a35cbf04492edf7e81e341611628e64c0747679764fd8c7b04484d

Identifiers

AWSSDK.Core.dll

Description:

AWSSDK.Core

The Amazon Web Services SDK for .NET (.NET Core 3.1) - Core Runtime

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.Core.dll
MD5: 00dc2967ad312264a7ff65eea14ae002
SHA1: f6908d716edcfb495fd503cfae1d72e65c64b552
SHA256:13f67e426986422b65a54e5b425425c049297f0b760723f2a61d0c502fc2a151

Identifiers

AWSSDK.DynamoDBv2.dll

Description:

AWSSDK.DynamoDBv2

The Amazon Web Services SDK for .NET (.NET Core 3.1) - Amazon DynamoDB. Amazon DynamoDB is a fast and flexible NoSQL database service for all applications that need consistent, single-digit millisecond latency at any scale.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.DynamoDBv2.dll
MD5: 672a2239c1b9624aaf13a50bd78f24f0
SHA1: bfc39f42f39e9b7674a866a0e6ab0912c3976e29
SHA256:a73f800568da8b1d10584f51b7f60ff8599dfe884a061506374106ea7b60eacc

Identifiers

AWSSDK.Extensions.NETCore.Setup.dll

Description:

AWSSDK.Extensions.NETCore.Setup

Amazon Web Services SDK for .NET extensions for .NET Core setup

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.Extensions.NETCore.Setup.dll
MD5: 16c4d2168143c1802bd5f0e22a6a6e77
SHA1: 4f2dd534473e60396793e3daf8e7d2c78c9749a7
SHA256:de842a88c3aef72b4b5c916dee93f367226d5587d8ea929ccfb083919395ba6b

Identifiers

AWSSDK.Extensions.NETCore.Setup:3.7.2

File Path: D:\Onboarding\Authorizer\src\Authorizer\Authorizer.csproj

Identifiers

AWSSDK.Kinesis.dll

Description:

AWSSDK.Kinesis

The Amazon Web Services SDK for .NET (.NET Core 3.1) - Amazon Kinesis. Amazon Kinesis is a fully managed, cloud-based service for real-time processing of large, distributed data streams.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.Kinesis.dll
MD5: 55f9c9dfc45d0c99d00df1fdb8906dba
SHA1: d9bec436c205666bafd3a83c564f44f1842c910d
SHA256:1b9bda747c0f5649eb9f6f44fba0acd7b849e726c673b0cb38d5ee0bc7f78437

Identifiers

AWSSDK.Lambda.dll

Description:

AWSSDK.Lambda

The Amazon Web Services SDK for .NET (.NET Core 3.1) - AWS Lambda. AWS Lambda is a compute service that runs your code in response to events and automatically manages the compute resources for you, making it easy to build applications that respond quickly to new information.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.Lambda.dll
MD5: 8e9fdd824d660ddf700c1616b4211ecb
SHA1: f68793ff15c1451a6fa7ae9866d9e41eea9daa95
SHA256:57010c8613942e972f5443b8247db47ef68239404626ec8354ac4630f9ea65fc

Identifiers

AWSSDK.S3.dll

Description:

AWSSDK.S3

The Amazon Web Services SDK for .NET (.NET Core 3.1) - Amazon Simple Storage Service. Amazon Simple Storage Service (Amazon S3), provides developers and IT teams with secure, durable, highly-scalable object storage.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.S3.dll
MD5: 1693d0b04c152abff215cc1c6e3d3b48
SHA1: fbe832ef49b2875797120fcf7cde861f8ef99e43
SHA256:39ab4f847e0398588a658d1d507e72f62f72e21f7017bd27d668f005a80206c9

Identifiers

AWSSDK.SQS.dll

Description:

AWSSDK.SQS

The Amazon Web Services SDK for .NET (.NET Core 3.1) - Amazon Simple Queue Service. Amazon Simple Queue Service (SQS) is a fast, reliable, scalable, fully managed message queuing service. SQS makes it simple and cost-effective to decouple the components of a cloud application.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.SQS.dll
MD5: b64058f765f446099bfafdd7de480b0b
SHA1: 074f840c244bab2a2de9679c2c536bfd8b180ceb
SHA256:a54f151d8eb606fd9d02e62489c76fbf0c7fb620268822f5ddb3989b948f31e4

Identifiers

AWSSDK.SecurityToken.dll

Description:

AWSSDK.SecurityToken

The Amazon Web Services SDK for .NET (.NET Core 3.1) - AWS Security Token Service. The AWS Security Token Service (AWS STS) enables you to provide trusted users with temporary credentials that provide controlled access to your AWS resources.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.SecurityToken.dll
MD5: cc71468541154b15038c3cac1bbb3f23
SHA1: d86b9f4eb2d14659d48f55169df90d1ef963d129
SHA256:fe6eaecdd72a6280bb72db3a17dc63748d32b1114254cac74c3c44da0d8cc25b

Identifiers

AWSSDK.SimpleNotificationService.dll

Description:

AWSSDK.SimpleNotificationService

The Amazon Web Services SDK for .NET (.NET Core 3.1) - Amazon Simple Notification Service. Amazon Simple Notification Service (Amazon SNS) is a fast, flexible, fully managed push messaging service. Amazon SNS makes it simple and cost-effective to push notifications to Apple, Google, Fire OS, and Windows devices, as well as Android devices in China with Baidu Cloud Push.  You can also use SNS to push notifications to internet connected smart devices, as well as other distributed services.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.SimpleNotificationService.dll
MD5: 2a0aea99f4086fc30ca14f26c189b6fd
SHA1: d01c20985248b70fbef818dbbfbfd9a6836f3c30
SHA256:e5436663f4135f650f7a4663fac7626570c2f9be76f7a29474b8a4851705030a

Identifiers

AWSSDK.SimpleSystemsManagement.dll

Description:

AWSSDK.SimpleSystemsManagement

The Amazon Web Services SDK for .NET (.NET Core 3.1) - Amazon Simple Systems Manager (SSM). Amazon EC2 Simple Systems Manager (SSM) enables you to manage a number of administrative and configuration tasks on your instances.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AWSSDK.SimpleSystemsManagement.dll
MD5: ef1896a30bd410629a4c3796000d4a24
SHA1: 47987aaf60eef3520039aba68b84cc7f89dc1f6b
SHA256:04cb00a3c8aaeb5184a2963cc622a6a8a349d5d68111c6c71ee3cdc0c7f11b72

Identifiers

Amazon.AspNetCore.DataProtection.SSM.dll

Description:

Amazon.AspNetCore.DataProtection.SSM

AWS Systems Manager ASP.NET Core Data Protection Provider library allows you to use AWS Systems Manager's Parameter Store to store keys generated by ASP.NET's Data Protection API.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Amazon.AspNetCore.DataProtection.SSM.dll
MD5: c68f7ef58793633aca20d5537f8556b6
SHA1: c6aa5cd3d91a92375da190b38531c610577ace5e
SHA256:67d29bc3abd30afc2b17f9d1f1c1f655e833983c766403e4ecd4795449cf7b69

Identifiers

Amazon.Lambda.APIGatewayEvents.dll

Description:

Amazon.Lambda.APIGatewayEvents

Lambda event interfaces for API Gateway event source.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Amazon.Lambda.APIGatewayEvents.dll
MD5: f8d722d4fed53b617ca27ede8b0fd007
SHA1: ffbad6f0caadfb7b523b15c4ee0a387f3838d1e7
SHA256:4c2b8a366f500679241b8b7621a51db521ab235a34dd3daaea6be1fb5beb6a01

Identifiers

Amazon.Lambda.APIGatewayEvents:2.5.0

File Path: D:\Onboarding\Authorizer\src\Authorizer\Authorizer.csproj

Identifiers

Amazon.Lambda.CloudWatchEvents.dll

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Amazon.Lambda.CloudWatchEvents.dll
MD5: 95bcaf057baddd5713bcc10d17a73d5d
SHA1: bed28cd81de9b98d42c2bdf68a69aab61c5c26f7
SHA256:5f79fb4e79167c31d73b9bf1cff5f1b3241f9162e1aa889a76cccbe951f22b77

Identifiers

Amazon.Lambda.Core.dll

Description:

Amazon.Lambda.Core

Core interfaces for Lambda.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Amazon.Lambda.Core.dll
MD5: e3ff649709a36002a8caeba1c2b6a63c
SHA1: 8a0d532bd5dd292dd8b5572c81a0af48a30cd5ce
SHA256:d3fd1d761d03288299dfb5bc5fbb9650c360e815176828704ed683d056ffa249

Identifiers

Amazon.Lambda.Core:2.1.0

File Path: D:\Onboarding\Authorizer\src\Authorizer\Authorizer.csproj

Identifiers

Amazon.Lambda.KinesisAnalyticsEvents.dll

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Amazon.Lambda.KinesisAnalyticsEvents.dll
MD5: 8f07da2c44d07e00ffd18617185a44a6
SHA1: a3ee958d7b47e88ab6ae0574f37e6fa6e953999a
SHA256:239691d2dfbae3d58ea3c9b8c2f5b396b4f25651c36daa79099a9cf6e8c9c427

Identifiers

Amazon.Lambda.KinesisFirehoseEvents.dll

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Amazon.Lambda.KinesisFirehoseEvents.dll
MD5: d82690e43781e417b29ff66f8b5ef4d0
SHA1: 4c1f6bba718b21df0b04b4bd67cbbc83dd2d2221
SHA256:179e5a4529400afdc968f507b8431d5231517a83152a3c0ad4eaf90b2a9cfc54

Identifiers

Amazon.Lambda.LexEvents.dll

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Amazon.Lambda.LexEvents.dll
MD5: b89322ea82ad62547d97a46dd9dc14b6
SHA1: db339961be56761b0e8a506e3c14fcd50b9e1e54
SHA256:96936afa0b68936a44785528b270f1e7f65967af7707d61d144fccf91cf6f35a

Identifiers

Amazon.Lambda.S3Events.dll

Description:

Amazon.Lambda.S3Events

Lambda event interfaces for S3 event source.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Amazon.Lambda.S3Events.dll
MD5: 5ef1a162e3b5f0c31e8d4580f4624790
SHA1: 688edb3da7fbf8812e6fd5a819c52eb8fdb5bb49
SHA256:8271ee68778721ea61b439e5440a81a2863edfabdcb2c9c1778a9b8b86969fdd

Identifiers

Amazon.Lambda.Serialization.SystemTextJson.dll

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Amazon.Lambda.Serialization.SystemTextJson.dll
MD5: c1cd7fd3b07a4af7815bfe8015a2284e
SHA1: e2f3299ec806001aa2e171aa0d957e2a7d287903
SHA256:a0a68396c58029c206feeedc15f088307eba9b36185eee9707c127be84988a68

Identifiers

Amazon.Lambda.Serialization.SystemTextJson:2.3.0

File Path: D:\Onboarding\Authorizer\src\Authorizer\Authorizer.csproj

Identifiers

Amazon.Lambda.TestUtilities.dll

Description:

Amazon.Lambda.TestUtilties includes stub implementations of interfaces defined in Amazon.Lambda.Core and helper methods.

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\Amazon.Lambda.TestUtilities.dll
MD5: 826762c8a91a919ea831875b0d7d78ad
SHA1: f5e073535f9336b543f8a9c2c6bc16e3fa67991d
SHA256:d093bbb3ffc49a56a8fa4dce76ec8b7984b609d73a17fab5d5f5c573f0efa9c9

Identifiers

Amazon.Lambda.TestUtilities:2.0.0

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\Authorizer.Tests.csproj

Identifiers

Authorizer.Tests.csproj

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\Authorizer.Tests.csproj
MD5: 4d9093bd996b5f8441b864ddad3087e6
SHA1: 40bb05fde68694d9899bdcce186137fb53acd291
SHA256:2849e97645a7704b901fa2592e2c1f5323b857c0b4a71db66d3f593540d10b6a

Identifiers

  • None

Authorizer.Tests.dll

Description:

Authorizer.Tests

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\Authorizer.Tests.dll
MD5: d7c3322cf4f728cdbb97fd83afc3f8b4
SHA1: 6a0db5f5e5583fc0c9c5243b446f5208f0506278
SHA256:32b12c4c2dfd4d6375bee2bca05affa44f3aabb13bf5386090583952d88368cd

Identifiers

Authorizer.csproj

File Path: D:\Onboarding\Authorizer\src\Authorizer\Authorizer.csproj
MD5: 6f270f0f106731661d6dc05eaef2e491
SHA1: 8253eb4e38afaab16d782b2b13dacf3fb5d64b69
SHA256:065713e737a5d70aa2c5149d39f0a061ff0fb01500736f411086726be3c452e8

Identifiers

  • None

Authorizer.dll

Description:

Authorizer

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Authorizer.dll
MD5: d1a362c9dfb993b6b41f01a22ccab75e
SHA1: ff651911884ddd5c2afd13a185733f03b0317c5c
SHA256:4181afe7b12d55c1b582aa257fc000ff368db4ba71ea6212d960360aaaaacda8

Identifiers

AwsParameterStore.Microsoft.Extensions.Configuration.dll

Description:

AwsParameterStore.Microsoft.Extensions.Configuration

AWS Systems Manager Parameter Store configuration provider implementation for Microsoft.Extensions.Configuration.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\AwsParameterStore.Microsoft.Extensions.Configuration.dll
MD5: 6cff4cd5f4718297b37aa5e5bdc12d3b
SHA1: c45342ce39b8ea74491f13ab6382a1b479a7ad60
SHA256:903a0610bba31e40d1031e08d2a51354754f06c542678e587fbedab222def010

Identifiers

Hashids.net.dll

Description:

Hashids.net

Generate YouTube-like hashes from one or many numbers. Use hashids when you do not want to expose your database ids to the user.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Hashids.net.dll
MD5: 5d1689f2e4d893290b8a90b464e95bea
SHA1: d4bcf419c9ba3256243f904d489be5c4fb1bdc72
SHA256:ac19cd5e5239dd7c1b21fefad505b965eac63a105306ce2a43a98f8df2d742c4

Identifiers

Lumigo.DotNET.Instrumentation.dll

Description:

Lumigo.DotNET.Instrumentation

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Lumigo.DotNET.Instrumentation.dll
MD5: a3e723d35e9b88fa140d3a861ff9a343
SHA1: 850eb8c39fe460556b3cd670ee5ed80266fe0128
SHA256:6b9b6ec6a77c724e4ae6631f1d96051518f619a8d51e6762fd472a905e5e07cf

Identifiers

Lumigo.DotNET.Parser.dll

Description:

Lumigo.DotNET.Parser

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Lumigo.DotNET.Parser.dll
MD5: 8f73799c54f37cfe9242d24a8cadb19e
SHA1: 4b678ea57bb25a3ab189116083d5bb8ab6ec0ddc
SHA256:953362896d4482d14e3e3f1c16f9e8804a07be70001057b6fb1995f9b866be80

Identifiers

Lumigo.DotNET.Utilities.dll

Description:

Lumigo.DotNET.Utilities

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Lumigo.DotNET.Utilities.dll
MD5: fd5a921e648ddd485b15db829738106c
SHA1: de717c5ef13dc07c33db4ecf048eb41aa4df4e8d
SHA256:6c91294c7092e634176e9c8fbf5003961b6d1b9e60fd5e9488b03f2d66da94d4

Identifiers

Lumigo.DotNET.dll

Description:

Lumigo.DotNET

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Lumigo.DotNET.dll
MD5: 76c4aea1e1b97e88056e1ed3f17c0bfb
SHA1: 39d5f6242fd417032ff22dae1c3d435768577320
SHA256:a64e9db21517c10dcb7d3a23b77eed7ce6387b74228d658b98885445239f25b2

Identifiers

Microsoft.AspNetCore.Authentication.JwtBearer.dll

Description:

Microsoft.AspNetCore.Authentication.JwtBearer

ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.AspNetCore.Authentication.JwtBearer.dll
MD5: 0dc661bfe5a96cf81642e61dd4491145
SHA1: 116b9441e33953df1dd4bee3ccd3a4c9dad3c3d2
SHA256:bfbf72a1e4388397e1bfa1ad8a9e146ccb0d6fb3c2f6be86c3603c2ea2069468

Identifiers

Microsoft.DotNet.PlatformAbstractions.dll

Description:

Abstractions for making code that uses file system and environment testable.

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\Microsoft.DotNet.PlatformAbstractions.dll
MD5: a69ee0c1195620088b4efb1e8c9dca3d
SHA1: cede41194639465753550adecbecf32e85e582c7
SHA256:359451c3e3be25f7c383713787d1a3e762579c648bbce8e37b5010c0622f9681

Identifiers

Microsoft.Extensions.Configuration.Abstractions.dll

Description:

Microsoft.Extensions.Configuration.Abstractions

Abstractions of key-value pair based configuration.

Commonly Used Types:
Microsoft.Extensions.Configuration.IConfiguration
Microsoft.Extensions.Configuration.IConfigurationBuilder
Microsoft.Extensions.Configuration.IConfigurationProvider
Microsoft.Extensions.Configuration.IConfigurationRoot
Microsoft.Extensions.Configuration.IConfigurationSection

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.Extensions.Configuration.Abstractions.dll
MD5: 5edcf3dccef856711d35e0afdbdf6d0c
SHA1: fefe0a4870d36814a45f8e9c63530f1963cd6c0c
SHA256:893f042b8bea61e3e56091ee6167af61bc38a39d35cb1d0f9b222aae4493146a

Identifiers

Microsoft.Extensions.Configuration.EnvironmentVariables.dll

Description:

Microsoft.Extensions.Configuration.EnvironmentVariables

Environment variables configuration provider implementation for Microsoft.Extensions.Configuration.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.Extensions.Configuration.EnvironmentVariables.dll
MD5: 7e850f02e1f8568dd99c416cae20321f
SHA1: e5981dc4199f1b03e2d9a69c0c035e25bacaed4e
SHA256:e4df59c4cc9f011e19acceb60d1072659cd23780646cc1fce32c74fe62d635c9

Identifiers

Microsoft.Extensions.Configuration.EnvironmentVariables:7.0.0

File Path: D:\Onboarding\Authorizer\src\Authorizer\Authorizer.csproj

Identifiers

Microsoft.Extensions.Configuration.FileExtensions.dll

Description:

Microsoft.Extensions.Configuration.FileExtensions

Extension methods for configuring file-based configuration providers for Microsoft.Extensions.Configuration.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.Extensions.Configuration.FileExtensions.dll
MD5: 4a64ad42d976dd0d7a2978293f0d3af2
SHA1: 781578f91fd34b51a635e2a2456bd4eecb2b53f9
SHA256:88d03448574da6e677994939beb887a43c23fdb060f135d9f07db4152c9fcae8

Identifiers

Microsoft.Extensions.Configuration.Json.dll

Description:

Microsoft.Extensions.Configuration.Json

JSON configuration provider implementation for Microsoft.Extensions.Configuration.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.Extensions.Configuration.Json.dll
MD5: 4a16bbc52e03301291d0b460f89ec3ce
SHA1: c4130184ca592ea7875ffc7b0c9e4a9bc1ccc136
SHA256:02add20d0f0583a04d47baf02c3b32284cfd25903a78742dc15ee41f9022750b

Identifiers

Microsoft.Extensions.Configuration.Json:7.0.0

File Path: D:\Onboarding\Authorizer\src\Authorizer\Authorizer.csproj

Identifiers

Microsoft.Extensions.Configuration.dll

Description:

Microsoft.Extensions.Configuration

Implementation of key-value pair based configuration for Microsoft.Extensions.Configuration. Includes the memory configuration provider.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.Extensions.Configuration.dll
MD5: 991ee31ef4e5138a558b096249c65e1c
SHA1: 3d89f910e18773882c34f8e86c4ed0bdfe49c420
SHA256:c301bfcd6a6a2baafd81425be273c7f29afe726ed6b6bed54202aa7376860b2d

Identifiers

Microsoft.Extensions.DependencyInjection.Abstractions.dll

Description:

Microsoft.Extensions.DependencyInjection.Abstractions

Abstractions for dependency injection.

Commonly Used Types:
Microsoft.Extensions.DependencyInjection.IServiceCollection

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.Extensions.DependencyInjection.Abstractions.dll
MD5: 6c8655836651933ffa4c253b5fa72939
SHA1: b75730d6c1ef5e0ca6d7f7a1a5ee540aee940836
SHA256:087813b2f9350b8c2d31e5bc9a5410fab198fadac87bb1269f41de6e6ad7ee62

Identifiers

Microsoft.Extensions.DependencyInjection.dll

Description:

Microsoft.Extensions.DependencyInjection

Default implementation of dependency injection for Microsoft.Extensions.DependencyInjection.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.Extensions.DependencyInjection.dll
MD5: d73fb559b01aca341a7750ddf3f6d6eb
SHA1: 5f62514899132aed440854e599b742683bcea1d5
SHA256:f8fe8bedbedefe0fab7e68c48f508d486b42258e16c09572886d7293507bdad6

Identifiers

Microsoft.Extensions.DependencyInjection:7.0.0

File Path: D:\Onboarding\Authorizer\src\Authorizer\Authorizer.csproj

Identifiers

Microsoft.Extensions.DependencyModel.dll

Description:

Abstractions for reading `.deps` files.

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\Microsoft.Extensions.DependencyModel.dll
MD5: 13f8831d108ed271d068990df780dac7
SHA1: 8ea6b66104aff050ecaf5be489caee177987f56b
SHA256:7577357b33958c973cc296030ca19a06914100dc320fa1c7e985b06dfbec8df3

Identifiers

Microsoft.Extensions.FileProviders.Abstractions.dll

Description:

Microsoft.Extensions.FileProviders.Abstractions

Abstractions of files and directories.

Commonly Used Types:
Microsoft.Extensions.FileProviders.IDirectoryContents
Microsoft.Extensions.FileProviders.IFileInfo
Microsoft.Extensions.FileProviders.IFileProvider

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.Extensions.FileProviders.Abstractions.dll
MD5: 18bdbcd81e202d50fa251034ee531f47
SHA1: 555dc7e687f53dc572d770ce173f3eaf2eb59d1b
SHA256:dfe3b756a0f39c2f67d8aa3dfdd66731da39f2e7f0ad67db06e8ca767f43cf30

Identifiers

Microsoft.Extensions.FileProviders.Physical.dll

Description:

Microsoft.Extensions.FileProviders.Physical

File provider for physical files for Microsoft.Extensions.FileProviders.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.Extensions.FileProviders.Physical.dll
MD5: 6d658999a4b887297d190056d0790eb1
SHA1: ddd29180cc76d436d1bda57c2649b5baf57ca9f8
SHA256:8d9fb59cc6e16e74c51cdf6cd7595c31234139378dcce1e12400db22b7d6ec22

Identifiers

Microsoft.Extensions.FileSystemGlobbing.dll

Description:

Microsoft.Extensions.FileSystemGlobbing

File system globbing to find files matching a specified pattern.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.Extensions.FileSystemGlobbing.dll
MD5: 4aaa5041bcbbd5e6ac621e7c9699fe9f
SHA1: 75721c9ee70cc2010b3ded83318641624d19a725
SHA256:eb04945d8de802dedef7c75c61c0939c8041f62c48125a906c55e9671c610e85

Identifiers

Microsoft.Extensions.Primitives.dll

Description:

Microsoft.Extensions.Primitives

Primitives shared by framework extensions. Commonly used types include:

Commonly Used Types:
Microsoft.Extensions.Primitives.IChangeToken
Microsoft.Extensions.Primitives.StringValues
Microsoft.Extensions.Primitives.StringSegment

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.Extensions.Primitives.dll
MD5: 3ba07a6760be077504734e9c0be0cce3
SHA1: a51acea6a9183d6c73dcedb5b0536f2a5efd5f43
SHA256:8578454489a439d5debd8a8ca9844b3b38076563eaf195cc5ed4bd27a8c54ea3

Identifiers

Microsoft.IdentityModel.JsonWebTokens.dll

Description:

Microsoft.IdentityModel.JsonWebTokens

Includes types that provide support for creating, serializing and validating JSON Web Tokens.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.IdentityModel.JsonWebTokens.dll
MD5: d1c90e9b006050217a08eabb6f894677
SHA1: 380f0f971cb5d04cfe9da70046d3ee58aa6cc769
SHA256:a250dca2e960fff1df8ad3a50b4bb7e7c1907acbd6f38522ef96a4389d7d88a7

Identifiers

  • pkg:generic/Microsoft.IdentityModel.JsonWebTokens@6.10.0.20330  (Confidence:Medium)
  • cpe:2.3:a:identitymodel_project:identitymodel:6.10.0:20330:*:*:*:*:*:*  (Confidence:Low)  
  • cpe:2.3:a:json_web_token_project:json_web_token:6.10.0:20330:*:*:*:*:*:*  (Confidence:Low)  
  • cpe:2.3:a:microsoft:identity_model:6.10.0:20330:*:*:*:*:*:*  (Confidence:Low)  
  • cpe:2.3:a:microsoft:identitymodel:6.10.0:20330:*:*:*:*:*:*  (Confidence:Low)  

CVE-2024-21319  

Microsoft Identity Denial of service vulnerability
CWE-20 Improper Input Validation, NVD-CWE-noinfo

CVSSv3:
  • Base Score: MEDIUM (6.8)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:2.3/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

Microsoft.IdentityModel.Protocols.OpenIdConnect.dll

Description:

Microsoft.IdentityModel.Protocols.OpenIdConnect

Includes types that provide support for OpenIdConnect protocol.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.IdentityModel.Protocols.OpenIdConnect.dll
MD5: ab12a0ce21d3730ec7ea182768bb2409
SHA1: ee9583a42b18271a689db29ceeb490a320bd1f25
SHA256:b2df04680ace444416b01964474905373d941b7ef5d3e760ac9b736c57cd46aa

Identifiers

CVE-2024-21319  

Microsoft Identity Denial of service vulnerability
CWE-20 Improper Input Validation, NVD-CWE-noinfo

CVSSv3:
  • Base Score: MEDIUM (6.8)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:2.3/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

Microsoft.IdentityModel.Tokens.dll

Description:

Microsoft.IdentityModel.Tokens

Includes types that provide support for SecurityTokens, Cryptographic operations: Signing, Verifying Signatures, Encryption.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Microsoft.IdentityModel.Tokens.dll
MD5: d2b32a65523db0265f67def95e54c6df
SHA1: 15de165fe62c4190128a3dfb066ad8d48c8a900c
SHA256:7227f7057918b2d21ae93fd610874e33bc401a346726a5ae308a96a1e9e01361

Identifiers

  • pkg:generic/Microsoft.IdentityModel.Tokens@6.10.0.20330  (Confidence:Medium)
  • cpe:2.3:a:identitymodel_project:identitymodel:6.10.0:20330:*:*:*:*:*:*  (Confidence:Low)  
  • cpe:2.3:a:microsoft:identity_model:6.10.0:20330:*:*:*:*:*:*  (Confidence:Low)  
  • cpe:2.3:a:microsoft:identitymodel:6.10.0:20330:*:*:*:*:*:*  (Confidence:Low)  

CVE-2024-21319  

Microsoft Identity Denial of service vulnerability
CWE-20 Improper Input Validation, NVD-CWE-noinfo

CVSSv3:
  • Base Score: MEDIUM (6.8)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:2.3/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

Microsoft.NET.Test.Sdk:15.5.0

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\Authorizer.Tests.csproj

Identifiers

Microsoft.TestPlatform.CrossPlatEngine.dll

Description:

Microsoft.TestPlatform.CrossPlatEngine

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\Microsoft.TestPlatform.CrossPlatEngine.dll
MD5: f4eedc1c75b69c0d0d9e80ed757c43b0
SHA1: 8cce74986da289f36b5f5ba64c12703e25945df2
SHA256:05ff637d5a3508f5f379c2735facff65a88dd25a4912207c5cb02de23259dfac

Identifiers

Microsoft.TestPlatform.CrossPlatEngine.resources.dll

Description:

Microsoft.TestPlatform.CrossPlatEngine

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\cs\Microsoft.TestPlatform.CrossPlatEngine.resources.dll
MD5: bf13ccd4e04ef31316ca03e3021d433d
SHA1: ab21ea3dcbf9ba2c6a3b822dd0be3be60345064e
SHA256:ce0540e1483437963f00b27cf76cbc24acffbab8a28aa33e48cd6be38aab9800

Identifiers

Microsoft.VisualStudio.CodeCoverage.Shim.dll

Description:

Microsoft.VisualStudio.CodeCoverage.Shim.dll

Microsoft.VisualStudio.CodeCoverage.Shim.dll

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\Microsoft.VisualStudio.CodeCoverage.Shim.dll
MD5: 18abc24fbcd39e398b03e6ec0dac1d15
SHA1: 5232d8f57f098056bed6ef39e927c91f3dd68011
SHA256:d7cdd2d3e02ada6de7b99d6795bea37020a3040c1232f253e6fd5785346250c0

Identifiers

Newtonsoft.Json.dll

Description:

Json.NET .NET Standard 2.0

Json.NET is a popular high-performance JSON framework for .NET

File Path: D:\Onboarding\Authorizer\.sonarqube\bin\Newtonsoft.Json.dll
MD5: bbe7bab7d62fff428929222396154324
SHA1: 142b1f67c392c48bc36d664cdaead35cf00ef209
SHA256:8c1dd5c184b4e2e7ead06971ff3ebcb46783be972292d1deb1061744369b4d80

Identifiers

Newtonsoft.Json.dll

Description:

Json.NET .NET 6.0

Json.NET is a popular high-performance JSON framework for .NET

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\Newtonsoft.Json.dll
MD5: 86a83a63f12b55fd3718cfbfb577d7dc
SHA1: 3df82ebba50086de83aee27c63255e80f2d73f3b
SHA256:4816c4276f575e4d85b80633a0df2eadf29496fe00bdc33cd7843e61373bde0e

Identifiers

SonarScanner.MSBuild.Common.dll

Description:

SonarScanner.MSBuild.Common

File Path: D:\Onboarding\Authorizer\.sonarqube\bin\SonarScanner.MSBuild.Common.dll
MD5: 638176ed2b26d5dc9bb235369e64ee47
SHA1: fdfa15ce9bc7db4e31fbae1110dd3e93748ba081
SHA256:59411967838149b3ef121cb6f51faf2cb59ac58e6d1a3fd4061d7cfcddade25b

Identifiers

SonarScanner.MSBuild.Tasks.dll

Description:

SonarScanner.MSBuild.Tasks

File Path: D:\Onboarding\Authorizer\.sonarqube\bin\SonarScanner.MSBuild.Tasks.dll
MD5: a1e7ea5f4cee21609b26391b88408ee0
SHA1: 3b5b7c413b9086a1c8fcdba384642da437b96600
SHA256:2024b5c55140da0bb83378fc218e4f48f48e26b49000eb26435e7cf4e2cdd919

Identifiers

CVE-2020-22475  

"Tasks" application version before 9.7.3 is affected by insecure permissions. The VoiceCommandActivity application component allows arbitrary applications on a device to add tasks with no restrictions.
CWE-276 Incorrect Default Permissions

CVSSv3:
  • Base Score: MEDIUM (6.8)
  • Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:0.9/RC:R/MAV:A
CVSSv2:
  • Base Score: MEDIUM (4.6)
  • Vector: /AV:L/AC:L/Au:N/C:P/I:P/A:P

References:

Vulnerable Software & Versions:

CVE-2022-39349  

The Tasks.org Android app is an open-source app for to-do lists and reminders. The Tasks.org app uses the activity `ShareLinkActivity.kt` to handle "share" intents coming from other components in the same device and convert them to tasks. Those intents may contain arbitrary file paths as attachments, in which case the files pointed by those paths are copied in the app's external storage directory. Prior to versions 12.7.1 and 13.0.1, those paths were not validated, allowing a malicious or compromised application in the same device to force Tasks.org to copy files from its internal storage to its external storage directory, where they became accessible to any component with permission to read the external storage. This vulnerability can lead to sensitive information disclosure. All information in the user's notes and the app's preferences, including the encrypted credentials of CalDav integrations if enabled, could be accessed by third party applications installed on the same device. This issue was fixed in versions 12.7.1 and 13.0.1. There are no known workarounds.
CWE-668 Exposure of Resource to Wrong Sphere, CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')

CVSSv3:
  • Base Score: MEDIUM (5.5)
  • Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:1.8/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

System.IdentityModel.Tokens.Jwt.dll

Description:

System.IdentityModel.Tokens.Jwt

Includes types that provide support for creating, serializing and validating JSON Web Tokens.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\System.IdentityModel.Tokens.Jwt.dll
MD5: c3fff67628dd9f275bbdaa2851f36237
SHA1: 506d3ff0ddd7c1a5f99149e48f4a49c73c252337
SHA256:996fc6aee3d1927b870c1008fd05abef5dacc1cd056be73367c2269ed2283e25

Identifiers

  • pkg:generic/System.IdentityModel.Tokens.Jwt@6.10.0.20330  (Confidence:Medium)
  • cpe:2.3:a:identitymodel_project:identitymodel:6.10.0:20330:*:*:*:*:*:*  (Confidence:Low)  
  • cpe:2.3:a:microsoft:identity_model:6.10.0:20330:*:*:*:*:*:*  (Confidence:Low)  
  • cpe:2.3:a:microsoft:identitymodel:6.10.0:20330:*:*:*:*:*:*  (Confidence:Low)  

CVE-2024-21319  

Microsoft Identity Denial of service vulnerability
CWE-20 Improper Input Validation, NVD-CWE-noinfo

CVSSv3:
  • Base Score: MEDIUM (6.8)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:2.3/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

System.Text.Encodings.Web.dll

Description:

System.Text.Encodings.Web

Provides types for encoding and escaping strings for use in JavaScript, HyperText Markup Language (HTML), and uniform resource locators (URL).

Commonly Used Types:
System.Text.Encodings.Web.HtmlEncoder
System.Text.Encodings.Web.UrlEncoder
System.Text.Encodings.Web.JavaScriptEncoder

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\System.Text.Encodings.Web.dll
MD5: 7dd9ae427be644501ed8dea4204ce45b
SHA1: 4c0874d5dcec93568957c5693a1afaf320d9cde4
SHA256:d2af18fa9cec4f826b75649b1ad7fc88a07138adfdad986481f11db11817754e

Identifiers

System.Text.Json.dll

Description:

System.Text.Json

Provides high-performance and low-allocating types that serialize objects to JavaScript Object Notation (JSON) text and deserialize JSON text to objects, with UTF-8 support built-in. Also provides types to read and write JSON text encoded as UTF-8, and to create an in-memory document object model (DOM), that is read-only, for random access of the JSON elements within a structured view of the data.

The System.Text.Json library is built-in as part of the shared framework in .NET Runtime. The package can be installed when you need to use it in other target frameworks.

File Path: D:\Onboarding\Authorizer\src\Authorizer\bin\Debug\net6.0\System.Text.Json.dll
MD5: b7bcb19ea0110c433799412df9ab7c8a
SHA1: 0c39979d5a017e7c46169cc9fbfdda4448c33fb5
SHA256:a6cb476d20369516d882fdd0f318a7fe9eb694c166dc9f2089e99b4c27f17ac7

Identifiers

System.Xml.XPath.XmlDocument.dll

Description:

System.Xml.XPath.XmlDocument

System.Xml.XPath.XmlDocument

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\System.Xml.XPath.XmlDocument.dll
MD5: 176e9b8e9b622a51e5b3db8d0fac6eea
SHA1: 5354245e852fdc31019f6496c1b7cae056b471ff
SHA256:f95c1bd1cf19ef02b788a3473ccc64716d26504d98831ddcb240f1d913a3eef3

Identifiers

testhost.dll

Description:

testhost

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\testhost.dll
MD5: 9e3b6c0c1c6083115518638435fdea07
SHA1: ef741eb8c0398698da9965f359d71938b283feec
SHA256:4b9404bb74615f941216aa0840deaa331d83839c325c452eee6fef11a31c08a8

Identifiers

xunit.abstractions.dll

Description:

xUnit.net Abstractions (PCL)

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\xunit.abstractions.dll
MD5: d8a035462916c19a6dd13cb534051e81
SHA1: 92a0d358e7342e3da1e73dfb27c783de55a379c1
SHA256:3166dc70323fb30ccf1cedb0fe86f2ad122c46d254542342d90386efc4c9285c

Identifiers

xunit.assert.dll

Description:

xUnit.net Assertion Library

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\xunit.assert.dll
MD5: 98dc6431dfc29b95e4d54c845d5814dd
SHA1: 2a14e476aa5fa52f58b7499b7c8cda268d85f591
SHA256:25991be89512b3d91804d14fa64c9170149dc87f197ef621a12087459f6ec52c

Identifiers

xunit.core.dll

Description:

xUnit.net Core

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\xunit.core.dll
MD5: 046dacbe0fd6f956d0c87c2c9213b275
SHA1: 792e31e7892969a2702f0176c2604042fa417448
SHA256:2f3b0c3a0af03e3418d7cf75001b766879c1fc91b0a90e835b7ac26ee756e87b

Identifiers

xunit.execution.dotnet.dll

Description:

xUnit.net Execution (dotnet)

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\xunit.execution.dotnet.dll
MD5: bf162edaa798abb03c39199240399fb1
SHA1: 74dd0b416a76cc9010610630def86edb33fb3f62
SHA256:b077705fce40c753505d3444d287df525b2e6084d6cea7ad6584ea6b73ad0c0c

Identifiers

xunit.runner.reporters.netcoreapp10.dll

Description:

xUnit.net Runner Reporters (.NET Core 1.0)

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\xunit.runner.reporters.netcoreapp10.dll
MD5: a4a6532cf678938f110f1461e95ce5b7
SHA1: 636868211505633b7c70daf4000ba880aad935da
SHA256:a84027d262e7ccb19895191512a42108384eefbf0ac0f8ef95040e3db06ba64b

Identifiers

xunit.runner.utility.netcoreapp10.dll

Description:

xUnit.net Runner Utility (.NET Core 1.0)

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\xunit.runner.utility.netcoreapp10.dll
MD5: 670ccaf310a9876567af0586414e4285
SHA1: 5bd8ec7bf3d0b684dc467e1dafc60c8b3fb18eea
SHA256:0cd7335437688592987edb8c4429dfd62012184e47249db4afc233d2a892efac

Identifiers

xunit.runner.visualstudio.dotnetcore.testadapter.dll

Description:

xUnit.net Runner for Visual Studio (netcoreapp3.1)

Visual Studio 2019 16.8+ Test Explorer runner for the xUnit.net framework. Capable of running xUnit.net v1.9.2 and v2.0+ tests. Supports .NET 4.7.2 or later, .NET Core 3.1 or later, and Universal Windows 10.0.16299 or later.

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\bin\Debug\net6.0\xunit.runner.visualstudio.dotnetcore.testadapter.dll
MD5: 3d6e3125fd267065a503253b4fc4fc5f
SHA1: 322ffe7bc99c4653c6728a01418b0aa3c6c0807c
SHA256:c1eb3dc30e83e8a800e8c97aedcaf5e85242c35ff0510139261d39cee66762ec

Identifiers

xunit.runner.visualstudio:2.4.5

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\Authorizer.Tests.csproj

Identifiers

xunit:2.4.2

File Path: D:\Onboarding\Authorizer\test\Authorizer.Tests\Authorizer.Tests.csproj

Identifiers



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.